CVE-2024-9387: GitLab

Medium severity, CVSS 6.4. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in GitLab CE/EE affecting all versions from 11.8 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. An attacker could potentially perform an open redirect against a given releases API endpoint.

Affected products

• GitLab GitLab: from 11.8.0, before 17.4.6 (fixed in 17.4.6); from 17.5.0, before 17.5.4 (fixed in 17.5.4); from 17.6.0, before 17.6.2 (fixed in 17.6.2)

Published 2024-12-12. Last modified 2026-06-17.