💣Exploit CVE-2024-11274 - GitLab CE/EE HTTP Header Injection

[Mental_Outlaw]

CVE ID : CVE-2024-11274
Published : Dec. 12, 2024, 12:15 p.m. | 37 minutes ago
Description : An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, injection of NEL headers in k8s proxy response could lead to session data exfiltration.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Reply if you wish me to write a poc tools of this exploit for you.