Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Release: GitLab 17.4.6, 17.5.4, 17.6.2 Clear all filters
TI-2024-07632 CVE-2024-8233 · GHSA-g8v2-8wgj-gwx8

Inefficient Algorithmic Complexity in GitLab

Priority MEDIUM 40

An issue has been discovered in GitLab CE/EE affecting all versions from 9.4 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0076 Published 2024-12-12 Fixed in 17.4.6, 17.5.4 +1 CWE-407
TI-2024-08691 CVE-2024-9367 · GHSA-hwhg-29fx-c3jc

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 21

An issue was discovered in GitLab CE/EE affecting all versions starting from 13.9 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2, that allows an attacker to cause uncontrolled CPU consumption, potentially lead…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00495 Published 2024-12-12 Fixed in 17.4.6, 17.5.4 +1 CWE-770
TI-2024-08710 CVE-2024-9387 · GHSA-v6xp-h7ww-6xqf

URL Redirection to Untrusted Site ('Open Redirect') in GitLab

Priority LOW 31

An issue was discovered in GitLab CE/EE affecting all versions from 11.8 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2.

CVSS 3.1MEDIUM 6.4 Network Low privileges User interaction EPSS 0.00385 Published 2024-12-12 Fixed in 17.4.6, 17.5.4 +1 CWE-601
TI-2024-09319 CVE-2024-10043 · GHSA-5fpq-xm8v-3843

Incorrect Authorization in GitLab

Priority LOW 16

An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 17.4.6, all versions starting from 17.5 before 17.5.4 all versions starting from 17.6 before 17.6.2, that allows group users to v…

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00457 Published 2024-12-12 Fixed in 17.4.6, 17.5.4 +1 CWE-863
TI-2024-10444 CVE-2024-11274 · GHSA-fr8h-r296-xggf

URL Redirection to Untrusted Site ('Open Redirect') in GitLab

Priority MEDIUM 40

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, injection of NEL headers in k8s proxy respons…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00462 Published 2024-12-12 Fixed in 17.4.6, 17.5.4 +1 CWE-601
TI-2024-11663 CVE-2024-12570 · GHSA-7p75-9h8v-vxq4

Privilege Context Switching Error in GitLab

Priority LOW 32

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.4.6, from 17.5 prior to 17.5.4, and from 17.6 prior to 17.6.2.

CVSS 3.1MEDIUM 6.7 Network Low privileges User interaction EPSS 0.00514 Published 2024-12-12 Fixed in 17.4.6, 17.5.4 +1 CWE-270
TI-2024-11402 CVE-2024-12292 · GHSA-86fp-jr93-hvv2

Insertion of Sensitive Information into Log File in GitLab

Priority LOW 18

An issue was discovered in GitLab CE/EE affecting all versions starting from 11.0 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, where sensitive information passed in GraphQL…

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00234 Published 2024-12-12 Fixed in 17.4.6, 17.5.4 +1 CWE-532