Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: GitLab 17.2.9, 17.3.5, 17.4.2 Clear all filters
TI-2024-08335 CVE-2024-8977 · GHSA-ccj4-qhw4-4rrm

Server-Side Request Forgery (SSRF) in GitLab

Priority LOW 38

An issue has been discovered in GitLab EE affecting all versions starting from 15.10 prior to 17.2.9, from 17.3 prior to 17.3.5, and from 17.4 prior to 17.4.2.

CVSS 3.1HIGH 8.2 Network Low privileges No interaction EPSS 0.00552 Published 2024-10-10 Fixed in 17.2.9, 17.3.5 +1 CWE-918
TI-2024-08903 CVE-2024-9596 · GHSA-r4v6-vp2q-qh25

Inclusion of Sensitive Information in Source Code in GitLab

Priority LOW 24

An issue has been discovered in GitLab EE affecting all versions starting from 16.6 prior to 17.2.9, from 17.3 prior to 17.3.5, and from 17.4 prior to 17.4.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00323 Published 2024-10-10 Fixed in 17.2.9, 17.3.5 +1 CWE-540
TI-2024-08928 CVE-2024-9623 · GHSA-m8gr-q643-3q88

Incorrect Authorization in GitLab

Priority LOW 29

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows deploy keys to push to an archiv…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00323 Published 2024-10-10 Fixed in 17.2.9, 17.3.5 +1 CWE-863