- CVSS
- MEDIUM · 6.4 v3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
- Published
- 2024-08-22
- Weakness
- CWE-77, CWE-77
- Source
- nvd.nist.gov/vuln/detail/CVE-2024-7110
Description
An issue was discovered in GitLab EE affecting all versions starting 17.0 to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1 allows an attacker to execute arbitrary command in a victim’s pipeline through prompt injection.
References
How GTK Cyber trains on this
AI security training at GTK Cyber covers the LLM and ML-pipeline vulnerability classes that vulnerabilities like CVE-2024-7110 fall into. Our hands-on courses are taught by Charles Givre and other practitioners who break and defend production AI systems.