CVE-2024-11274: URL Redirection to Untrusted Site ('Open Redirect') in GitLab
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 before 17.4.6, starting from 17.5 before 17.5.4, and starting from 17.6 before 17.6.2, injection of Network Error Logging (NEL) headers in kubernetes proxy response could lead to session data exfiltration. This is a high severity issue (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, 8.7). It is now mitigated in the latest release and is assigned CVE-2024-11274.
Other sources
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, injection of NEL headers in k8s proxy response could lead to session data exfiltration.
— MITRE
Affected Software
Remediation
Information
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-11274?
CVE-2024-11274 is a high severity vulnerability that can lead to session data exfiltration.
How do I fix CVE-2024-11274?
To fix CVE-2024-11274, upgrade GitLab CE/EE to version 17.4.6, 17.5.4, or 17.6.2 or later.
What versions of GitLab are affected by CVE-2024-11274?
CVE-2024-11274 affects GitLab CE/EE versions 16.1 through 17.4.6, 17.5 through 17.5.4, and 17.6 through 17.6.2.
What type of vulnerability is CVE-2024-11274?
CVE-2024-11274 is an injection vulnerability that allows for the exfiltration of session data.
Can CVE-2024-11274 be exploited remotely?
Yes, CVE-2024-11274 can be exploited remotely due to its nature as an injection vulnerability in the k8s proxy response.