Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: GitLab 17.2.9, 17.3.5, 17.4.2 Clear all filters
TI-2024-08330 CVE-2024-8970 · GHSA-fh2j-rw8g-c7f3

Incorrect Authorization in GitLab

Priority MEDIUM 41

An issue was discovered in GitLab CE/EE affecting all versions starting from 11.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows an attacker to trigger a pipelin…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00676 Published 2024-10-11 Fixed in 17.2.9, 17.3.5 +1 CWE-863
TI-2024-04648 CVE-2024-5005 · GHSA-58jq-vjfq-8v45

Incorrect Provision of Specified Functionality in GitLab

Priority LOW 20

An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 11.4 before 17.2.9, all versions starting from 17.3 before 17.3.5, all versions starting from 17.4 before 17.4.2 It was possibl…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00396 Published 2024-10-11 Fixed in 17.2.9, 17.3.5 +1 CWE-684
TI-2024-08509 CVE-2024-9164 · GHSA-xc4q-wvjc-4v56

Missing Authentication for Critical Function in GitLab

Priority MEDIUM 45

An issue was discovered in GitLab EE affecting all versions starting from 12.5 prior to 17.2.9, starting from 17.3, prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows running pipelines on arbitrary bra…

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.01038 Published 2024-10-11 Fixed in 17.2.9, 17.3.5 +1 CWE-306