Threats tagged 'bit-gitlab-2024-4278'

An information disclosure vulnerability in GitLab EE allows a maintainer to obtain a Dependency Proxy password by editing a specific Dependency Proxy setting. This issue affects GitLab EE versions from 16.5 up to but not including 17.2.8, from 17.3 up to but not including 17.3.4, and from 17.4 up to but not including 17.4.1. A patch is available to address this vulnerability.