{"data":{"id":"2fd5118a-599a-4311-a6fd-132ec6c43813","title":"CVE-2024-4099: An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to…","summary":"CVE-2024-4099 affects GitLab EE from 16.0 before 17.2.8, from 17.3 before 17.3.4, and from 17.4 before 17.4.1. An AI feature read unsanitized content, which could let an attacker hide prompt injection. The weakness is classified as CWE-116, Improper Encoding or Escaping of Output.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-4099","publishedAt":"2024-09-26T23:15:02.873Z","cveId":"CVE-2024-4099","cweIds":["CWE-116","CWE-116"],"cvssScore":"3.1","cvssSeverity":"low","severity":"low","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["GitLab EE AI feature"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"GitLab EE AI feature hidden prompt injection through unsanitized content","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00295,"epssCheckedAt":"2026-11-04T06:10:13.536Z","kevDateAdded":null,"advisoryAliases":["GHSA-8qr9-mc3w-88c6"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-29T00:11:16.768Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}