MEDIUM
CVE-2024-4472
CVSS
5.5
Description
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.5 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3 prior to 17.3.2, where dependency proxy credentials are retained in graphql Logs.
Summary dbcve.org
GitLab CE/EE versions 16.5 through 17.3.1 contained a vulnerability where dependency proxy credentials were inadvertently being written to GraphQL logs, exposing sensitive authentication credentials to anyone with log access.
Mitigation
Upgrade to GitLab 17.1.7, 17.2.5, or 17.3.2 or later. Additionally, audit GraphQL logs for exposed credentials and rotate any potentially compromised credentials as a precautionary measure.
Weakness (CWE)
CWE-532
Sensitive Information in Logs
EPSS Score
0.22%
Probability of exploitation in next 30 days
12.4th percentile
References
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.