Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GitLab 16.0.8, 16.1.3, 16.2.2 Clear all filters
TI-2023-03722 CVE-2023-4008 · GHSA-29hm-v8p9-7mcg

Incorrect Ownership Assignment in GitLab

Priority HIGH 81

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.9 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00705 Published 2023-08-03 Fixed in 16.0.8, 16.1.3 +1 CWE-708
TI-2023-03655 CVE-2023-3932 · GHSA-vvcp-5v5p-8jhc

Incorrect User Management in GitLab

Priority HIGH 71

An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2.

CVSS 3.1HIGH 8.2 Network Low privileges No interaction EPSS 0.00877 Published 2023-08-03 Fixed in 16.0.8, 16.1.3 +1 CWE-286