BIT-gitlab-2024-7586
See a problem?- Import Source
- https://github.com/bitnami/vulndb/tree/main/data/gitlab/BIT-gitlab-2024-7586.json
- JSON Data
- https://api.osv.dev/v1/vulns/BIT-gitlab-2024-7586
- Aliases
- Published
- 2025-06-24T15:13:54.274Z
- Modified
- 2025-08-13T06:08:53.695Z
- Summary
- Insertion of Sensitive Information into Log File in GitLab
- Details
-
An issue was discovered in GitLab EE affecting all versions starting from 17.0 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2, where webhook deletion audit log preserved auth credentials.
- Database specific
{ "cpes": [ "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*" ], "severity": "High" }- References
Affected packages
Bitnami / gitlab
Package
- Name
- gitlab
- Purl
- pkg:bitnami/gitlab
Severity
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator