{"schema":"vulnpedia.research/1","cve":"CVE-2024-7404","references":[{"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/476670","tags":["issue-tracking","permissions-required","Broken Link"],"source":"mitre","sourceId":"GitLab","modified":"2024-11-14T13:02:23.587Z","origins":[{"source":"mitre","sourceId":"GitLab","modified":"2024-11-14T13:02:23.587Z","url":"https://gitlab.com/gitlab-org/gitlab/-/issues/476670"},{"source":"nvd","sourceId":"CVE-2024-7404","modified":"2026-06-17T08:20:01.790","url":"https://gitlab.com/gitlab-org/gitlab/-/issues/476670"}]},{"url":"https://hackerone.com/reports/2627925","tags":["technical-description","exploit","permissions-required","Permissions Required"],"source":"mitre","sourceId":"GitLab","modified":"2024-11-14T13:02:23.587Z","origins":[{"source":"mitre","sourceId":"GitLab","modified":"2024-11-14T13:02:23.587Z","url":"https://hackerone.com/reports/2627925"},{"source":"nvd","sourceId":"CVE-2024-7404","modified":"2026-06-17T08:20:01.790","url":"https://hackerone.com/reports/2627925"}]},{"url":"https://about.gitlab.com/releases/2024/11/13/patch-release-gitlab-17-5-2-released/#device-oauth-flow-allows-for-cross-window-forgery","tags":["Vendor Advisory"],"source":"mitre","sourceId":"GitLab","modified":"2024-11-14T13:02:23.587Z","origins":[{"source":"mitre","sourceId":"GitLab","modified":"2024-11-14T13:02:23.587Z","url":"https://about.gitlab.com/releases/2024/11/13/patch-release-gitlab-17-5-2-released/#device-oauth-flow-allows-for-cross-window-forgery"},{"source":"nvd","sourceId":"CVE-2024-7404","modified":"2026-06-17T08:20:01.790","url":"https://about.gitlab.com/releases/2024/11/13/patch-release-gitlab-17-5-2-released/#device-oauth-flow-allows-for-cross-window-forgery"}]},{"source":"euvd","sourceId":"EUVD-2024-48333","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48333","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2024-48333","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48333"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}