Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: GitLab 18.0.5, 18.1.3, 18.2.1 Clear all filters
TI-2025-00652 CVE-2025-0765 · GHSA-hv89-cw42-xpf3

Incorrect Authorization in GitLab

Priority LOW 20

An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed an unauthorized user to access custom service desk email add…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00457 Published 2025-07-24 Fixed in 18.0.5, 18.1.3 +1 CWE-863
TI-2025-01112 CVE-2025-1299 · GHSA-54gr-cf5g-5pjm

Missing Authorization in GitLab

Priority LOW 20

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 18.0.5, all versions starting from 18.1 before 18.1.3, all versions starting from 18.2 before 18.2.1 that, under circumstances…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00385 Published 2025-07-24 Fixed in 18.0.5, 18.1.3 +1 CWE-862
TI-2025-04460 CVE-2025-4976 · GHSA-w962-8hwv-w52p

Exposure of Sensitive Information Due to Incompatible Policies in GitLab

Priority LOW 25

An issue has been discovered in GitLab EE affecting all versions from 17.0 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that, under certain circumstances, could have allowed an attacker to access internal no…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00504 Published 2025-07-24 Fixed in 18.0.5, 18.1.3 +1 CWE-213
TI-2025-06368 CVE-2025-7001 · GHSA-w44h-qxhv-wqww

Insufficient Granularity of Access Control in GitLab

Priority LOW 20

An issue has been discovered in GitLab CE/EE affecting all versions from 15.0 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed priviledged users to access certain resource_group informati…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00444 Published 2025-07-24 Fixed in 18.0.5, 18.1.3 +1 CWE-1220