CVE-2024-12570

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.4.6, from 17.5 prior to 17.5.4, and from 17.6 prior to 17.6.2. It may have been possible for an attacker with a victim's `CI_JOB_TOKEN` to obtain a GitLab session token belonging to the victim.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L

Weakness enumeration

CWE-270

Affected software

Vendor	Product	Versions
GitLab	GitLab	>= 13.7, < 17.4.6; >= 17.5, < 17.5.4; >= 17.6, < 17.6.2

References

https://gitlab.com/gitlab-org/gitlab/-/issues/494694Exploit, Issue Tracking, Vendor Advisory
https://hackerone.com/reports/2724948Permissions Required

Timeline

Published: Dec 12, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-125719.8The Store Locator for WordPress with Google Maps – LotsOfLocales plugin for WordPress is vulnerable to Local File Inclusion in version 3.98.CVE-2024-125726.1The Hello In All Languages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. Thi CVE-2024-125745.4The SVG Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and includin CVE-2024-125755.3The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Basic Information Exposure in all versions CVE-2024-125765.5Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW running on the GPU fr CVE-2024-125777.3Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's vi CVE-2024-125785.3The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.5 CVE-2024-125795.3The Minify HTML plugin for WordPress is vulnerable to Regular Expression Denial of Service (ReDoS) in all versions up to, and including, 2.1 CVE-2024-12585.9A vulnerability was found in Juanpao JPShop up to 1.5.02. It has been declared as problematic. Affected by this vulnerability is an unknown CVE-2024-125805.3A vulnerability in danny-avila/librechat prior to version 0.7.6 allows for logs debug injection. The parameters sessionId, fileId, userId, a CVE-2024-125814.8The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via adm CVE-2024-125827.1A flaw was found in the skupper console, a read-only interface that renders cluster network, traffic details, and metrics for a network app