Skip to content
LLMMedium

CVE-2024-4099: An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8,…

Occurred
Sep 26, 2024
Published
Sep 26, 2024
Source
NVD CVE

Summary

An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. An AI feature was found to read unsanitized content in a way that could have allowed an attacker to hide prompt injection.

Tags

  • CVE
  • CVE-2024-4099
  • cvss:LOW

Classification

Category confidence: 90%
Severity confidence: 85%

Rationale: Vulnerability in GitLab AI feature related to prompt injection, a language model security issue.

Classifier: Qwen/Qwen3.5-35B-A3B-FP8

Visit source