Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: GitLab 17.3.7, 17.4.4, 17.5.2 Clear all filters
TI-2024-06862 CVE-2024-7404 · GHSA-f7c4-9mmj-8w4v

Improper Restriction of Rendered UI Layers or Frames in GitLab

Priority LOW 33

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 prior to 17.3.7, starting from 17.4 prior to 17.4.4 and starting from 17.5 prior to 17.5.2, which could have allowed an attacker gaining f…

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00558 Published 2024-11-14 Fixed in 17.3.7, 17.4.4 +1 CWE-1021
TI-2024-08991 CVE-2024-9693 · GHSA-c7xg-c3jr-78wp

Incorrect Authorization in GitLab

Priority MEDIUM 41

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.0 prior to 17.3.7, starting from 17.4 prior to 17.4.4, and starting from 17.5 prior to 17.5.2, which could have allowed unauthorized access…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00551 Published 2024-11-14 Fixed in 17.3.7, 17.4.4 +1 CWE-863