Vulnerability Description
An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. An AI feature was found to read unsanitized content in a way that could have allowed an attacker to hide prompt injection.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gitlab | Gitlab | >= 16.0.0, < 17.2.8 |
Related Weaknesses (CWE)
References
- https://gitlab.com/gitlab-org/gitlab/-/issues/457798Broken Link
- https://hackerone.com/reports/2459597Permissions Required
FAQ
What is CVE-2024-4099?
CVE-2024-4099 is a vulnerability with a CVSS score of 3.1 (LOW). An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. An AI feature was found to read unsanitiz...
How severe is CVE-2024-4099?
CVE-2024-4099 has been rated LOW with a CVSS base score of 3.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-4099?
Check the references section above for vendor advisories and patch information. Affected products include: Gitlab Gitlab.