GitLab 中敏感系统信息暴露于未经授权的控制范围 (CVE-2024-10240)
CVE编号
CVE-2024-10240
利用情况
暂无
补丁情况
N/A
披露时间
2024-11-27
漏洞描述
An issue has been discovered in GitLab EE affecting all versions starting from 17.3 before 17.3.7, all versions starting from 17.4 before 17.4.4, all versions starting from 17.5 before 17.5.2 in which an unauthenticated user may be able to read some information about an MR in a private project, under certain circumstances.
解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
文章评论