Vulnerability Database

317,577

Total vulnerabilities in the database

CVE-2024-5528

An issue was discovered in GitLab CE/EE affecting all versions prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2, which allows a subdomain takeover in GitLab Pages.

  • Published: Feb 5, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-5528
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

CWEs:

Software From Fixed in
gitlab / gitlab 17.1.0 17.1.2
gitlab / gitlab 17.0.0 17.0.4
gitlab / gitlab - 16.11.6