Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GitLab 17.10.7, 17.11.3, 18.0.1 Clear all filters
TI-2024-07233 CVE-2024-7803 · GHSA-8jx5-64fv-87qh

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 33

An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00513 Published 2025-05-23 Fixed in 17.10.7, 17.11.3 +1 CWE-770
TI-2024-08508 CVE-2024-9163 · GHSA-mqcw-437p-q69q

User Interface (UI) Misrepresentation of Critical Information in GitLab

Priority LOW 33

A business logic error in GitLab CE/EE affecting all versions starting from 12.1 prior to 17.10.7, 17.11 prior to 17.11.3 and 18.0 prior to 18.0.1 where an attacker can cause a branch name confusion in confidential MRs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00404 Published 2025-05-23 Fixed in 17.10.7, 17.11.3 +1 CWE-451