{"data":{"id":"7c4ffaa3-ba86-4c92-a3a1-47f5fab6cb53","title":"CVE-2024-3303: An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7…","summary":"CVE-2024-3303 affects GitLab EE in all versions from 16.0 before 17.6.5, from 17.7 before 17.7.4, and from 17.8 before 17.8.2. An attacker can use prompt injection to exfiltrate the contents of a private issue. NIST has not yet provided an NVD assessment.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-3303","publishedAt":"2025-02-13T09:15:09.653Z","cveId":"CVE-2024-3303","cweIds":null,"cvssScore":"6.4","cvssSeverity":"medium","severity":"medium","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["GitLab Duo"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"GitLab EE prompt injection exfiltrates contents of private issues","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00396,"epssCheckedAt":"2026-11-04T12:08:33.434Z","kevDateAdded":null,"advisoryAliases":["GHSA-8572-xjmw-7fq3"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-28T18:09:52.838Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}