Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: GitLab 16.10.5, 16.11.2, 16.9.7 Clear all filters
TI-2023-06112 CVE-2023-6682 · GHSA-62f3-w8qm-86g2

Inefficient Regular Expression Complexity in GitLab

Priority LOW 30

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00752 Published 2024-05-09 Fixed in 16.9.7, 16.10.5 +1 CWE-1333
TI-2024-02280 CVE-2024-2454 · GHSA-6mjw-gpqr-2788

Allocation of Resources Without Limits or Throttling in GitLab

Priority MEDIUM 54

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.11 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.33301 Published 2024-05-09 Fixed in 16.9.7, 16.10.5 +1 CWE-770
TI-2024-02467 CVE-2024-2651 · GHSA-v3j6-jv37-286j

Inefficient Regular Expression Complexity in GitLab

Priority MEDIUM 54

An issue has been discovered in GitLab CE/EE affecting all versions before 16.9.7, all versions starting from 16.10 before 16.10.5, all versions starting from 16.11 before 16.11.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.33301 Published 2024-05-09 Fixed in 16.9.7, 16.10.5 +1 CWE-1333
TI-2024-04226 CVE-2024-4539 · GHSA-2qhw-5384-m8g2

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 30

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 where abusing the API to filter branc…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00774 Published 2024-05-09 Fixed in 16.9.7, 16.10.5 +1 CWE-770
TI-2024-04279 CVE-2024-4597 · GHSA-7xp2-7fx4-46xp

Cross-Site Request Forgery (CSRF) in GitLab

Priority LOW 29

An issue has been discovered in GitLab EE affecting all versions from 16.7 before 16.9.7, all versions starting from 16.10 before 16.10.5, all versions starting from 16.11 before 16.11.2.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00313 Published 2024-05-09 Fixed in 16.9.7, 16.10.5 +1 CWE-352