CVE-2024-12244

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-12244
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-12244.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-12244
Aliases
Downstream
Published
2025-04-24T07:31:11.125Z
Modified
2025-12-05T03:47:57.499544Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
Missing Authorization in GitLab
Details

An issue has been discovered in access controls could allow users to view certain restricted project information even when related features are disabled in GitLab EE, affecting all versions from 17.7 prior to 17.9.7, 17.10 prior to 17.10.5, and 17.11 prior to 17.11.1.

Database specific 
{
    "cwe_ids": [
        "CWE-862"
    ],
    "cna_assigner": "GitLab",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/12xxx/CVE-2024-12244.json"
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
1fd574ee5710155adf5307fba45132264dcb64a1
Fixed
aad9be82b95a8c07389440601f1de24926a2960c
Database specific 
{
    "versions": [
        {
            "introduced": "17.7"
        },
        {
            "fixed": "17.9.7"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
ef8041bebeac4b902db1666c582a3de1d495ae39
Fixed
2f78e1e2cf3941d23882ec5dd6d35fd0d08bbba0
Database specific 
{
    "versions": [
        {
            "introduced": "17.10"
        },
        {
            "fixed": "17.10.5"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
b7c061ce59a5eca5c5764fcf61be8a5103fb7d55
Fixed
cd4c186e8bc515c2f01dee71939156aac5150a2c
Database specific 
{
    "versions": [
        {
            "introduced": "17.11"
        },
        {
            "fixed": "17.11.1"
        }
    ]
}

Affected versions

v17.*

v17.10.0-ee
v17.10.1-ee
v17.10.2-ee
v17.10.3-ee
v17.10.4-ee
v17.11.0-ee