CVE-2024-12380

MEDIUM Year: 2024
CVSS v3 Score
4.4
Medium
Weakness Type
CWE-209
View all →

Vulnerability Description

An issue was discovered in GitLab EE/CE affecting all versions starting from 11.5 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2. Certain user inputs in repository mirroring settings could potentially expose sensitive authentication information.

Related Vulnerabilities

CVE-2020-27015

MEDIUM
CVSS:4.4(Medium)

Trend Micro Antivirus for Mac 2020 (Consumer) contains an Error Message Information Disclosure vulnerability that if exploited, could allow kernel pointers and debug messages to leak to userland. An a...

CWE-2092020

CVE-2024-45713

MEDIUM
CVSS:4.4(Medium)

SolarWinds Kiwi CatTools is susceptible to a sensitive data disclosure vulnerability when a non-default setting has been enabled for troubleshooting purposes.

CWE-2092024

CVE-2025-4166

MEDIUM
CVSS:4.5(Medium)

Vault Community and Vault Enterprise Key/Value (kv) Version 2 plugin may unintentionally expose sensitive information in server and audit logs when users submit malformed payloads during secret creati...

CWE-2092025

CVE-2014-8161

MEDIUM
CVSS:4.3(Medium)

PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constra...

CWE-2092014

CVE-2017-0885

MEDIUM
CVSS:4.3(Medium)

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share. Due to an error in the application logic an adversary with access to a write-on...

CWE-2092017

CVE-2018-21032

MEDIUM
CVSS:4.3(Medium)

A vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation Director prior to 8.5.0-00 allow authenticated remote users to expose technical information through error messages. Hi...

CWE-2092018