CVE-2024-9773

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-9773
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-9773.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-9773
Aliases
Downstream
Published
2025-03-27T12:31:27.475Z
Modified
2025-12-05T08:56:51.264071Z
Severity
  • 3.7 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
Details

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicious code to the CLI commands shown in the UI.

Database specific 
{
    "cwe_ids": [
        "CWE-77"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/9xxx/CVE-2024-9773.json",
    "cna_assigner": "GitLab"
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
1fdefb34741e329ede520eba6c3038eb48bfa191
Fixed
27e19f1747ade9da7af660001a20e2dd47219a69
Database specific 
{
    "versions": [
        {
            "introduced": "14.9"
        },
        {
            "fixed": "17.8.6"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
f5041566b342c2f30a8d63b8117272c454e18410
Fixed
3f8a07baae6b8ce6bcc5b35075d00164df3b3b60
Database specific 
{
    "versions": [
        {
            "introduced": "17.9"
        },
        {
            "fixed": "17.9.3"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
ef8041bebeac4b902db1666c582a3de1d495ae39
Fixed
6313c41c8800bdea9c525d84ebfc419cd7f29027
Database specific 
{
    "versions": [
        {
            "introduced": "17.10"
        },
        {
            "fixed": "17.10.1"
        }
    ]
}

Affected versions

v17.*

v17.10.0-ee
v17.9.0-ee
v17.9.1-ee
v17.9.2-ee