CVE-2024-2191

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 16.9 through 16.11.5 GitLab CE/EE versions 17.0 through 17.0.3 GitLab CE/EE versions 17.1 through 17.1.1

Description: An issue in GitLab CE/EE allows a merge request title to be visible publicly despite being set as project members only. This is related to inadequate access control. The issue can be exploited by a remote attacker to disclose protected information.

Recommendations: For versions 16.9 through 16.11.5, update to version 16.11.5 or later. For versions 17.0 through 17.0.3, update to version 17.0.3 or later. For versions 17.1 through 17.1.1, update to version 17.1.1 or later.