CVE-2024-11129 — Generation of Error Message Containing Sensitive Information in GitLab

CVE-2024-11129

Generation of Error Message Containing Sensitive Information in GitLab PUBLISHED

Description (CNA)

An issue has been discovered in GitLab EE affecting all versions from 17.1 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. This allows attackers to perform targeted searches with sensitive keywords to get the count of issues containing the searched term."

Affected (CNA)

Vendor / product	Versions
GitLab / GitLab	affected 17.1 before 17.8.7; affected 17.9 before 17.9.6; affected 17.10 before 17.10.4

CWE

CWE-209

References

https://gitlab.com/gitlab-org/gitlab/-/issues/503722
https://hackerone.com/reports/2717400

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.