CVE-2024-9773

Name of the Vulnerable Software and Affected Versions GitLab EE versions 14.9 through 17.8.6 GitLab EE versions 17.9 through 17.8.3 GitLab EE versions 17.10 through 17.10.1

Description An issue was discovered in GitLab EE, where an input validation issue in the Harbor registry integration could have allowed a maintainer to add malicious code to the CLI commands shown in the UI.

Recommendations For GitLab EE versions 14.9 through 17.8.6, update to version 17.8.6 or later to resolve the issue. For GitLab EE versions 17.9 through 17.8.3, update to version 17.8.3 or later to resolve the issue. For GitLab EE versions 17.10 through 17.10.1, update to version 17.10.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Harbor registry integration to minimize the risk of exploitation.