CVE-2024-3303

An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior to 17.8.2, which allows an attacker to exfiltrate contents of a private issue using prompt injection...

CVE-2024-3303

creationtimestamp| type| source ---|---|--- 2025-02-13 08:39:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113995677190948647 2025-02-13 09:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li2e2crliq2h 2025-02-13 10:09:06+00:00|...

CVE-2024-3303

Removed by vendor...

CVE-2024-3303

CVE-2024-3303 affects GitLab Enterprise Edition (GitLab EE) — all versions from 16.0 up to 17.6.5, from 17.7 up to 17.7.4, and from 17.8 up to 17.8.2. The issue allows an attacker to exfiltrate contents of a private issue via prompt injection. The description and connected documents confirm the a...