Vulnerability Database

317,577

Total vulnerabilities in the database

CVE-2024-11274

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, injection of NEL headers in k8s proxy response could lead to session data exfiltration.

  • Published: Dec 12, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-11274
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.7
  • AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

CWEs:

Software From Fixed in
gitlab / gitlab 17.6.0 17.6.2
gitlab / gitlab 17.5.0 17.5.4
gitlab / gitlab 16.1.0 17.4.6