Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: GitLab 16.5.6, 16.6.4, 16.7.2 Clear all filters
TI-2023-01907 CVE-2023-2030 · GHSA-797c-p7mm-pf4h

Improper Verification of Cryptographic Signature in GitLab

Priority LOW 24

An issue has been discovered in GitLab CE/EE affecting all versions from 12.2 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which an attacker could potentially modify the metadata of signed commits.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00387 Published 2024-01-12 Fixed in 16.5.6, 16.6.4 +1 CWE-347
TI-2023-04429 CVE-2023-4812 · GHSA-5q5j-r39w-wc64

Incorrect Authorization in GitLab

Priority LOW 34

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.0051 Published 2024-01-12 Fixed in 16.5.6, 16.6.4 +1 CWE-863
TI-2023-04929 CVE-2023-5356 · GHSA-x7v8-7cpc-hv73

Incorrect Authorization in GitLab

Priority MEDIUM 40

Incorrect authorization checks in GitLab CE/EE from all versions starting from 8.13 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2, allows a user to abuse slac…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00829 Published 2024-01-12 Fixed in 16.5.6, 16.6.4 +1 CWE-863
TI-2023-06357 CVE-2023-6955 · GHSA-2w7q-mj4w-9cm2

Missing Authorization in GitLab

Priority LOW 30

A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6, 16.6 prior to 16.6.4 and 16.7 prior to 16.7.2.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00552 Published 2024-01-12 Fixed in 16.5.6, 16.6.4 +1 CWE-862