{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-30T04:23:01.846","vulnerabilities":[{"cve":{"id":"CVE-2024-9512","sourceIdentifier":"cve@gitlab.com","published":"2025-06-12T14:15:29.680","lastModified":"2026-06-17T08:24:42.723","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An issue has been discovered in GitLab EE affecting all versions prior to 17.10.8, 17.11 prior to 17.11.4, and 18.0 prior to 18.0.2. It may have been possible for private repository to be cloned in case of race condition when a secondary node is out of sync."},{"lang":"es","value":"Se ha detectado un problema en GitLab EE que afecta a todas las versiones anteriores a la 17.10.8, 17.11 anteriores a la 17.11.4 y 18.0 anteriores a la 18.0.2. Es posible que se haya clonado un repositorio privado en caso de una condición de ejecución cuando un nodo secundario no está sincronizado."}],"affected":[{"source":"cve@gitlab.com","affectedData":[{"vendor":"GitLab","product":"GitLab","defaultStatus":"unaffected","cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"git://git@gitlab.com:gitlab-org/gitlab.git","versions":[{"version":"0","lessThan":"17.10.8","versionType":"semver","status":"affected"},{"version":"17.11","lessThan":"17.11.4","versionType":"semver","status":"affected"},{"version":"18.0","lessThan":"18.0.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@gitlab.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-12T14:12:49.948999Z","id":"CVE-2024-9512","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve@gitlab.com","type":"Secondary","description":[{"lang":"en","value":"CWE-367"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","versionEndExcluding":"17.10.8","matchCriteriaId":"61E74077-8E03-45E9-B5C0-50D1C5706D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","versionEndExcluding":"17.10.8","matchCriteriaId":"AE1C02F8-A03B-4647-8FA2-5C297D86BE26"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","versionStartIncluding":"17.11.0","versionEndExcluding":"17.11.4","matchCriteriaId":"C804F9B0-8B23-4160-B24E-199411A81B95"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"17.11.0","versionEndExcluding":"17.11.4","matchCriteriaId":"CEAA838C-7B3C-45AF-9D3D-BD5DE41E57BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","versionStartIncluding":"18.0.0","versionEndExcluding":"18.0.2","matchCriteriaId":"7BD21B25-753E-48AB-B0D4-DFE90A135C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"18.0.0","versionEndExcluding":"18.0.2","matchCriteriaId":"6224AE70-D146-4A3B-BD4E-2853891F24FA"}]}]}],"references":[{"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/497748","source":"cve@gitlab.com","tags":["Broken Link"]},{"url":"https://hackerone.com/reports/2683469","source":"cve@gitlab.com","tags":["Permissions Required"]}]}}]}