Vulnerability Database

317,577

Total vulnerabilities in the database

CVE-2024-8977

An issue has been discovered in GitLab EE affecting all versions starting from 15.10 prior to 17.2.9, from 17.3 prior to 17.3.5, and from 17.4 prior to 17.4.2. Instances with Product Analytics Dashboard configured and enabled could be vulnerable to SSRF attacks.

  • Published: Oct 10, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-8977
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.2
  • AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

CWEs:

Software From Fixed in
gitlab / gitlab 17.4.0 17.4.2
gitlab / gitlab 17.3.0 17.3.5
gitlab / gitlab 15.10 17.2.9