Логотип exploitDog
bind:CVE-2024-11274
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-11274

Количество 5

Количество 5

ubuntu логотип

CVE-2024-11274

6 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, injection of NEL headers in k8s proxy response could lead to session data exfiltration.

CVSS3: 8.7
EPSS: Низкий
nvd логотип

CVE-2024-11274

6 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, injection of NEL headers in k8s proxy response could lead to session data exfiltration.

CVSS3: 8.7
EPSS: Низкий
debian логотип

CVE-2024-11274

6 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions startin ...

CVSS3: 8.7
EPSS: Низкий
github логотип

GHSA-fr8h-r296-xggf

6 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, injection of NEL headers in k8s proxy response could lead to session data exfiltration.

CVSS3: 8.7
EPSS: Низкий
fstec логотип

BDU:2024-11288

6 месяцев назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/ CE , связанная с раскрытием информации при передаче данных, позволяющая нарушителю получить несанкционированных доступ к защищенной информации

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-11274

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, injection of NEL headers in k8s proxy response could lead to session data exfiltration.

CVSS3: 8.7
0%
Низкий
6 месяцев назад
nvd логотип
CVE-2024-11274

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, injection of NEL headers in k8s proxy response could lead to session data exfiltration.

CVSS3: 8.7
0%
Низкий
6 месяцев назад
debian логотип
CVE-2024-11274

An issue was discovered in GitLab CE/EE affecting all versions startin ...

CVSS3: 8.7
0%
Низкий
6 месяцев назад
github логотип
GHSA-fr8h-r296-xggf

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, injection of NEL headers in k8s proxy response could lead to session data exfiltration.

CVSS3: 8.7
0%
Низкий
6 месяцев назад
fstec логотип
BDU:2024-11288

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/ CE , связанная с раскрытием информации при передаче данных, позволяющая нарушителю получить несанкционированных доступ к защищенной информации

CVSS3: 7.5
0%
Низкий
6 месяцев назад

Уязвимостей на страницу