CVE-2024-4612

6.1 mediumEPSS 0.4%

Medium (6.1) in gitlab gitlab. EPSS 0.4% chance of exploitation in the next 30 days.

An issue has been discovered in GitLab EE affecting all versions starting from 12.9 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under certain conditions an open redirect vulnerability could allow for an account takeover by breaking the OAuth flow.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-601
Published: 2024-09-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gitlab:gitlab

References

https://gitlab.com/gitlab-org/gitlab/-/issues/460707
https://hackerone.com/reports/2479857
https://about.gitlab.com/releases/2024/09/11/patch-release-gitlab-17-3-2-released/

Check your stack JSON