Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2024-4278

An information disclosure issue has been discovered in GitLab EE affecting all versions starting from 16.5 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. A maintainer could obtain a Dependency Proxy password by editing a certain Dependency Proxy setting.

  • Published: Sep 26, 2024
  • Updated: May 4, 2025
  • CVE: CVE-2024-4278
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 2.7
  • AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
gitlab / gitlab 17.3.0 17.3.4
gitlab / gitlab 16.5.0 17.2.8
gitlab / gitlab 17.4.0 17.4.0.x