Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Release: GitLab 17.10.8, 17.11.4, 18.0.2 Clear all filters
TI-2025-05404 CVE-2025-5982 · GHSA-4m4w-7ph3-mcfg

Insufficient Granularity of Access Control in GitLab

Priority LOW 39

An issue has been discovered in GitLab EE affecting all versions from 12.0 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00313 Published 2025-06-12 Fixed in 17.10.8, 17.11.4 +1 CWE-1220
TI-2024-08827 CVE-2024-9512 · GHSA-g6rr-7jqw-c6hc

Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab

Priority LOW 26

An issue has been discovered in GitLab EE affecting all versions prior to 17.10.8, 17.11 prior to 17.11.4, and 18.0 prior to 18.0.2.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00255 Published 2025-06-12 Fixed in 17.10.8, 17.11.4 +1 CWE-367
TI-2025-00567 CVE-2025-0673 · GHSA-rp5v-chq5-pw9q

Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab

Priority MEDIUM 40

An issue has been discovered in GitLab CE/EE affecting all versions from 17.7 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2, allow an attacker to trigger an infinite redirect loop, potentially leading to a…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00552 Published 2025-06-12 Fixed in 17.10.8, 17.11.4 +1 CWE-835
TI-2025-04661 CVE-2025-5195 · GHSA-fccc-r92h-5q24

Authorization Bypass Through User-Controlled Key in GitLab

Priority LOW 20

An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00304 Published 2025-06-12 Fixed in 17.10.8, 17.11.4 +1 CWE-639
TI-2025-01270 CVE-2025-1478 · GHSA-9c34-92qm-j7ff

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 33

An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00429 Published 2025-06-12 Fixed in 17.10.8, 17.11.4 +1 CWE-770
TI-2025-01305 CVE-2025-1516 · GHSA-r66m-9f9x-jv46

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 33

An issue has been discovered in GitLab CE/EE affecting all versions from 8.7 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00429 Published 2025-06-12 Fixed in 17.10.8, 17.11.4 +1 CWE-770