Vulnerabilities

TI-2024-01614 CVE-2024-1736 · GHSA-28j9-fq4c-qrqg

Uncontrolled Resource Consumption in GitLab

LOW 30

An issue has been discovered in GitLab CE/EE affecting all versions prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00575 Published 2024-06-12 Fixed in 16.10.7, 16.11.4 +1 CWE-1333

TI-2024-01396 CVE-2024-1495 · GHSA-8372-vr6c-f48r

Uncontrolled Resource Consumption in GitLab

LOW 30

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.1 prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00575 Published 2024-06-12 Fixed in 16.10.7, 16.11.4 +1 CWE-1333

TI-2024-01829 CVE-2024-1963 · GHSA-wx3g-p9w5-pp6m

Uncontrolled Resource Consumption in GitLab

LOW 30

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.4 prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00575 Published 2024-06-12 Fixed in 16.10.7, 16.11.4 +1 CWE-1333

TI-2024-03908 CVE-2024-4201 · GHSA-wq8m-964x-6vr4

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

LOW 21

A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 16.10.7, all versions starting from 16.11 before 16.111.4, all versions starting from 17.0 before 17.0.2.

CVSS 3.1MEDIUM 4.4 Network Low privileges User interaction EPSS 0.00483 Published 2024-06-12 Fixed in 16.10.7, 16.11.4 +1 CWE-79

Vulnerabilities

Filters

Uncontrolled Resource Consumption in GitLab

Uncontrolled Resource Consumption in GitLab

Uncontrolled Resource Consumption in GitLab

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab