CVE-2024-4472

5.5 mediumEPSS 0.2%

Medium (5.5) in gitlab gitlab. EPSS 0.2% chance of exploitation in the next 30 days.

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.5 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3 prior to 17.3.2, where dependency proxy credentials are retained in graphql Logs.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2024-09-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gitlab:gitlab

References

https://gitlab.com/gitlab-org/gitlab/-/issues/460289
https://hackerone.com/reports/2477062
https://about.gitlab.com/releases/2024/09/11/patch-release-gitlab-17-3-2-released/

Check your stack JSON