{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-02T19:37:43.981","vulnerabilities":[{"cve":{"id":"CVE-2024-8974","sourceIdentifier":"cve@gitlab.com","published":"2024-09-26T23:15:03.083","lastModified":"2026-06-17T08:23:39.717","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Information disclosure in Gitlab EE/CE affecting all versions from 15.6 prior to 17.2.8, 17.3 prior to 17.3.4, and 17.4 prior to 17.4.1 in specific conditions it was possible to disclose to an unauthorised user the path of a private project.\""},{"lang":"es","value":"Divulgación de información en Gitlab EE/CE que afecta a todas las versiones desde la 15.6 anterior a la 17.2.8, la 17.3 anterior a la 17.3.4 y la 17.4 anterior a la 17.4.1: en condiciones específicas era posible revelar a un usuario no autorizado la ruta de un proyecto privado."}],"affected":[{"source":"cve@gitlab.com","affectedData":[{"vendor":"GitLab","product":"GitLab","defaultStatus":"unaffected","cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"git://git@gitlab.com:gitlab-org/gitlab.git","versions":[{"version":"15.6","lessThan":"17.2.8","versionType":"semver","status":"affected"},{"version":"17.3","lessThan":"17.3.4","versionType":"semver","status":"affected"},{"version":"17.4","lessThan":"17.4.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@gitlab.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","baseScore":2.6,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-27T15:46:36.689310Z","id":"CVE-2024-8974","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve@gitlab.com","type":"Secondary","description":[{"lang":"en","value":"CWE-684"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","versionStartIncluding":"15.6.0","versionEndExcluding":"17.2.8","matchCriteriaId":"CF1537ED-2DE1-4781-ABD4-64816E5CE8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"15.6.0","versionEndExcluding":"17.2.8","matchCriteriaId":"84ADBC3D-7A98-453A-8F34-FF810842EDCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","versionStartIncluding":"17.3.0","versionEndExcluding":"17.3.4","matchCriteriaId":"FBB47BC0-FE38-4628-B4C2-DA89EC467CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"17.3.0","versionEndExcluding":"17.3.4","matchCriteriaId":"27CB6247-D7EE-40BB-BF4A-8CE5350E31BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:17.4.0:*:*:*:community:*:*:*","matchCriteriaId":"4FEBC1F7-0AAA-4CA2-B099-3F4218900FB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:17.4.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"3AC3130C-A3AA-403A-85D9-92FD2B8BC091"}]}]}],"references":[{"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/482843","source":"cve@gitlab.com","tags":["Broken Link"]}]}}]}