← Database

CVE-2024-7110

MEDIUM CVSS: 6.4 Published: 2024-08-22 Modified: 2026-06-17

Description

An issue was discovered in GitLab EE affecting all versions starting 17.0 to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1 allows an attacker to execute arbitrary command in a victim's pipeline through prompt injection.

Affected Platforms

Gitlab Gitlab

Weakness Type

CWE-77, CWE-77

References