CVE-2024-12380

Name of the Vulnerable Software and Affected Versions: GitLab EE/CE versions 11.5 through 17.7.7 GitLab EE/CE versions 17.8 through 17.8.5 GitLab EE/CE versions 17.9 through 17.9.2

Description: An issue was discovered in GitLab EE/CE that could potentially expose sensitive authentication information due to certain user inputs in repository mirroring settings.

Recommendations: For versions 11.5 through 17.7.7, update to a version after 17.7.7 to resolve the issue. For versions 17.8 through 17.8.5, update to a version after 17.8.5 to resolve the issue. For versions 17.9 through 17.9.2, update to a version after 17.9.2 to resolve the issue. As a temporary workaround, consider restricting access to the repository mirroring settings to minimize the risk of exploitation.