Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-7586

An issue was discovered in GitLab EE affecting all versions starting from 17.0 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2, where webhook deletion audit log preserved auth credentials.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 0.6%
CVSS Severity
CVSS v3 Score 4.1
Products affected by CVE-2024-7586
  • Gitlab » Gitlab » Version: 17.0.0
    cpe:2.3:a:gitlab:gitlab:17.0.0
  • Gitlab » Gitlab » Version: 17.0.1
    cpe:2.3:a:gitlab:gitlab:17.0.1
  • Gitlab » Gitlab » Version: 17.0.2
    cpe:2.3:a:gitlab:gitlab:17.0.2
  • Gitlab » Gitlab » Version: 17.0.3
    cpe:2.3:a:gitlab:gitlab:17.0.3
  • Gitlab » Gitlab » Version: 17.0.4
    cpe:2.3:a:gitlab:gitlab:17.0.4
  • Gitlab » Gitlab » Version: 17.0.5
    cpe:2.3:a:gitlab:gitlab:17.0.5
  • Gitlab » Gitlab » Version: 17.1.0
    cpe:2.3:a:gitlab:gitlab:17.1.0
  • Gitlab » Gitlab » Version: 17.1.1
    cpe:2.3:a:gitlab:gitlab:17.1.1
  • Gitlab » Gitlab » Version: 17.1.2
    cpe:2.3:a:gitlab:gitlab:17.1.2
  • Gitlab » Gitlab » Version: 17.1.3
    cpe:2.3:a:gitlab:gitlab:17.1.3
  • Gitlab » Gitlab » Version: 17.2.0
    cpe:2.3:a:gitlab:gitlab:17.2.0
  • Gitlab » Gitlab » Version: 17.2.1
    cpe:2.3:a:gitlab:gitlab:17.2.1


Contact Us

Shodan ® - All rights reserved