CVE-2024-6446

CVE-2024-6446 affects GitLab versions 17.1 to 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. The issue allows a crafted URL to coerce a user into trusting an attacker-controlled application. The public sources describe the vulnerability and note a patch release: GitLab 17.3.2 (and related fi...