← Database

CVE-2024-6446

LOW CVSS: 3.5 Published: 2024-09-12 Modified: 2026-06-17

Description

An issue has been discovered in GitLab affecting all versions starting from 17.1 to 17.1.7, 17.2 prior to 17.2.5 and 17.3 prior to 17.3.2. A crafted URL could be used to trick a victim to trust an attacker controlled application.

Affected Platforms

Gitlab Gitlab

Weakness Type

CWE-840, NVD-CWE-noinfo

References