← Back to browse · API

CVE-2024-2434

Severity
HIGH
CVSS
8.5
EPSS
0.23178
Risk score
42.11
CISA KEV
No
PoC
No
Published
2024-04-25
Modified
2025-11-20
First seen
2026-08-07
Aliases
EUVD-2024-27385, GHSA-GWR5-7MCM-726J
Products
GitLab:GitLab 16.10 <16.10.4, GitLab:GitLab 16.11 <16.11.1, GitLab:GitLab 16.9 <16.9.6
Sources
euvd EUVD-2024-27385

Description

An issue has been discovered in GitLab affecting all versions of GitLab CE/EE 16.9 prior to 16.9.6, 16.10 prior to 16.10.4, and 16.11 prior to 16.11.1 where path traversal could lead to DoS and restricted file read.

References