Vulnerability Database

317,577

Total vulnerabilities in the database

CVE-2024-4994

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1.0 before 16.11.5, all versions starting from 17.0 before 17.0.3, all versions starting from 17.1.0 before 17.1.1 which allowed for a CSRF attack on GitLab's GraphQL API leading to the execution of arbitrary GraphQL mutations.

  • Published: Jun 20, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-4994
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.1
  • AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWEs:

Software From Fixed in
gitlab / gitlab 17.1.0 17.1.0.x
gitlab / gitlab 17.0.0 17.0.3
gitlab / gitlab 16.1.0 16.11.5