Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: GitLab 17.4.5, 17.5.3, 17.6.1 Clear all filters
TI-2024-10972 CVE-2024-11828 · GHSA-rmhm-cwgp-268p

Inefficient Algorithmic Complexity in GitLab

Priority LOW 34

A denial of service (DoS) condition was discovered in GitLab CE/EE affecting all versions from 13.2.4 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00607 Published 2024-11-26 Fixed in 17.4.5, 17.5.3 +1 CWE-407
TI-2024-10815 CVE-2024-11669 · GHSA-v84c-53c6-xmmp

Incorrect Authorization in GitLab

Priority LOW 35

An issue was discovered in GitLab CE/EE affecting all versions from 16.9.8 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00511 Published 2024-11-26 Fixed in 17.4.5, 17.5.3 +1 CWE-863
TI-2024-07523 CVE-2024-8114 · GHSA-f5r5-77wf-xx6h

Missing Authorization in GitLab

Priority MEDIUM 41

An issue has been discovered in GitLab CE/EE affecting all versions from 8.12 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00669 Published 2024-11-26 Fixed in 17.4.5, 17.5.3 +1 CWE-862
TI-2024-07584 CVE-2024-8177 · GHSA-94xw-8rg2-4fmc

Inefficient Algorithmic Complexity in GitLab

Priority LOW 34

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.6 prior to 17.4.5, starting from 17.5 prior to 17.5.3, starting from 17.6 prior to 17.6.1 which could cause Denial of Service via integratin…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00567 Published 2024-11-26 Fixed in 17.4.5, 17.5.3 +1 CWE-407
TI-2024-07636 CVE-2024-8237 · GHSA-r3mm-qxv5-x23h

Inefficient Algorithmic Complexity in GitLab

Priority LOW 34

A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions prior to 12.6 prior to 17.4.5, 17.5 prior to 17.5.3, and 17.6 prior to 17.6.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00607 Published 2024-11-26 Fixed in 17.4.5, 17.5.3 +1 CWE-407
TI-2024-10814 CVE-2024-11668 · GHSA-g797-r4r7-wp94

Insufficient Session Expiration in GitLab

Priority LOW 24

An issue has been discovered in GitLab CE/EE affecting all versions from 16.11 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00339 Published 2024-11-26 Fixed in 17.4.5, 17.5.3 +1 CWE-613