Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-4099

An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. An AI feature was found to read unsanitized content in a way that could have allowed an attacker to hide prompt injection.

Published

2024-09-26T23:15:02.873

Last Modified

2024-10-04T17:33:45.613

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 3.1 (LOW)

Weaknesses
  • Type: Secondary
    CWE-116
  • Type: Primary
    CWE-116
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application gitlab gitlab < 17.2.8 Yes
Application gitlab gitlab < 17.3.4 Yes
Application gitlab gitlab 17.4.0 Yes
References