Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: GitLab 17.7.7, 17.8.5, 17.9.2 Clear all filters
TI-2024-06758 CVE-2024-7296 · GHSA-2gjq-2933-hpjg

Incorrect Authorization in GitLab

Priority LOW 14

An issue was discovered in GitLab EE affecting all versions from 16.5 prior to 17.7.7, 17.8 prior to 17.8.5, and 17.9 prior to 17.9.2 which allowed a user with a custom permission to approve pending membership requests b…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00364 Published 2025-03-13 Fixed in 17.7.7, 17.8.5 +1 CWE-863
TI-2025-01074 CVE-2025-1257 · GHSA-5mjv-86c4-mprj

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 33

An issue was discovered in GitLab EE affecting all versions starting with 12.3 before 17.7.7, 17.8 prior to 17.8.5, and 17.9 prior to 17.9.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00461 Published 2025-03-13 Fixed in 17.7.7, 17.8.5 +1 CWE-770
TI-2024-11485 CVE-2024-12380 · GHSA-jj7w-rgj3-p8jw

Generation of Error Message Containing Sensitive Information in GitLab

Priority LOW 34

An issue was discovered in GitLab EE/CE affecting all versions starting from 11.5 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00573 Published 2025-03-13 Fixed in 17.7.7, 17.8.5 +1 CWE-209
TI-2024-12102 CVE-2024-13054 · GHSA-6gm9-64qv-5qwj

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 30

An issue was discovered in GitLab CE/EE affecting all versions before 17.7.7, 17.8 prior to 17.8.5, and 17.9 prior to 17.9.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00649 Published 2025-03-13 Fixed in 17.7.7, 17.8.5 +1 CWE-770
TI-2025-00549 CVE-2025-0652 · GHSA-3cg7-x7vx-225c

Incorrect Authorization in GitLab

Priority LOW 29

An issue has been discovered in GitLab EE/CE affecting all versions starting from 16.9 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2 could allow unauthorized…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00418 Published 2025-03-13 Fixed in 17.7.7, 17.8.5 +1 CWE-863