First published: Thu Aug 22 2024(Updated: )
An issue was discovered in GitLab EE affecting all versions starting 17.0 to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1 allows an attacker to execute arbitrary command in a victim's pipeline through prompt injection.
Credit: cve@gitlab.com
Affected Software | Affected Version | How to fix |
---|---|---|
GitLab GitLab | >=17.0.0<17.1.6 | |
GitLab GitLab | >=17.2.0<17.2.4 | |
GitLab GitLab | >=17.3.0<17.3.1 | |
GitLab GitLab | >=17.0.0<17.1.6 | |
GitLab GitLab | >=17.2.0<17.2.4 | |
GitLab GitLab | >=17.3.0<17.3.1 |
Upgrade to versions 17.3.1, 17.2.4, 17.1.6 or above.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.