Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GitLab 17.0.5, 17.1.3, 17.2.1 Clear all filters
TI-2024-06539 CVE-2024-7057 · GHSA-h3pp-hqpg-9qmw

Improper Access Control in GitLab

Priority LOW 20

An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 16.7 prior to 17.0.5, starting from 17.1 prior to 17.1.3, and starting from 17.2 prior to 17.2.1 where job artifacts can be ina…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00372 Published 2024-07-25 Fixed in 17.0.5, 17.1.3 +1 CWE-284
TI-2024-06532 CVE-2024-7047 · GHSA-x8pf-46vx-rg97

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority LOW 34

A cross site scripting vulnerability exists in GitLab CE/EE affecting all versions from 16.6 prior to 17.0.5, 17.1 prior to 17.1.3, 17.2 prior to 17.2.1 allowing an attacker to execute arbitrary scripts under the context…

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.00344 Published 2024-07-25 Fixed in 17.0.5, 17.1.3 +1 CWE-79