LLMHigh
CVE-2024-7110: An issue was discovered in GitLab EE affecting all versions starting 17.0 to 17.1.6, 17.2 prior to 1…
- Occurred
- Aug 22, 2024
- Published
- Aug 22, 2024
- Source
- NVD CVE
Summary
An issue was discovered in GitLab EE affecting all versions starting 17.0 to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1 allows an attacker to execute arbitrary command in a victim's pipeline through prompt injection.
Tags
- CVE
- CVE-2024-7110
- cvss:MEDIUM
Classification
Category confidence: 85%
Severity confidence: 90%
Rationale: Prompt injection vulnerability in GitLab pipelines allows arbitrary command execution, representing a significant security risk.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8