Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GitLab 17.6.5, 17.7.4, 17.8.2 Clear all filters
TI-2024-03097 CVE-2024-3303 · GHSA-8572-xjmw-7fq3

Improper Neutralization of Input Used for LLM Prompting in GitLab

Priority LOW 31

An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior to 17.8.2, which allows an attacker to exfiltrate contents…

CVSS 3.1MEDIUM 6.4 Network Low privileges User interaction EPSS 0.004 Published 2025-02-13 Fixed in 17.6.5, 17.7.4 +1 CWE-1427
TI-2025-01023 CVE-2025-1198 · GHSA-x774-v4vm-3h8m

Insufficient Session Expiration in GitLab

Priority LOW 24

An issue discovered in GitLab CE/EE affecting all versions from 16.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 meant that long-lived connections in ActionCable potentially allowed revoked Personal…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0027 Published 2025-02-13 Fixed in 17.6.5, 17.7.4 +1 CWE-613