Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Release: GitLab 16.11.5, 17.0.3, 17.1.1 Clear all filters
TI-2024-01395 CVE-2024-1493 · GHSA-c3ph-4hj5-r598

Uncontrolled Resource Consumption in GitLab

Priority LOW 29

An issue was discovered in GitLab CE/EE affecting all versions starting from 9.2 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, with the processing logic for generating link…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0049 Published 2024-06-26 Fixed in 16.11.5, 17.0.3 +1 CWE-1333
TI-2024-01692 CVE-2024-1816 · GHSA-269c-4g57-c9vg

Uncontrolled Resource Consumption in GitLab

Priority LOW 25

An issue was discovered in GitLab CE/EE affecting all versions starting from 12.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows for an attacker to cause a deni…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00289 Published 2024-06-26 Fixed in 16.11.5, 17.0.3 +1 CWE-400
TI-2024-02035 CVE-2024-2191 · GHSA-fjc3-h6x3-cpx9

Improper Access Control in GitLab

Priority LOW 30

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows merge request title to be visib…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00432 Published 2024-06-26 Fixed in 16.11.5, 17.0.3 +1 CWE-284
TI-2024-02917 CVE-2024-3115 · GHSA-73p8-f56m-692w

Exposure of Sensitive Information to an Unauthorized Actor in GitLab

Priority LOW 20

An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to access issues and e…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00337 Published 2024-06-26 Fixed in 16.11.5, 17.0.3 +1 CWE-862
TI-2024-03694 CVE-2024-3959 · GHSA-mmw4-rfwh-wm5m

Improper Authorization in GitLab

Priority LOW 29

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows private job artifacts can be ac…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00496 Published 2024-06-26 Fixed in 16.11.5, 17.0.3 +1 CWE-285
TI-2024-03743 CVE-2024-4011 · GHSA-3492-v7j6-2xgv

Improper Access Control in GitLab

Priority LOW 20

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows non-project member to promote k…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00323 Published 2024-06-26 Fixed in 16.11.5, 17.0.3 +1 CWE-863
TI-2024-04243 CVE-2024-4557 · GHSA-38f2-vcgr-hqxh

Uncontrolled Resource Consumption in GitLab

Priority LOW 30

Multiple Denial of Service (DoS) conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1 which…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00533 Published 2024-06-26 Fixed in 16.11.5, 17.0.3 +1 CWE-400
TI-2024-04557 CVE-2024-4901 · GHSA-7ghr-75pj-w6vc

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority HIGH 65

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, where a stored XSS vulnerability could be im…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.3347 Published 2024-06-26 Fixed in 16.11.5, 17.0.3 +1 CWE-79
TI-2024-05251 CVE-2024-5655 · GHSA-gr98-7cg9-j7c7

Improper Access Control in GitLab

Priority MEDIUM 53

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to trigger a pipeli…

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.07468 Published 2024-06-26 Fixed in 16.11.5, 17.0.3 +1 CWE-284
TI-2024-05046 CVE-2024-5430 · GHSA-w9qv-xhc6-m43c

Improper Access Control in GitLab

Priority LOW 31

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.10 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows a project maintainer can delet…

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00491 Published 2024-06-26 Fixed in 16.11.5, 17.0.3 +1 CWE-284
TI-2024-05867 CVE-2024-6323 · GHSA-chjh-944f-687f

Improper Isolation or Compartmentalization in GitLab

Priority MEDIUM 41

Improper authorization in global search in GitLab EE affecting all versions from 16.11 prior to 16.11.5 and 17.0 prior to 17.0.3 and 17.1 prior to 17.1.1 allows an attacker leak content of a private repository in a publi…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00521 Published 2024-06-26 Fixed in 16.11.5, 17.0.3 +1 CWE-863