Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: GitLab 17.11.5, 18.0.3, 18.1.1 Clear all filters
TI-2025-01511 CVE-2025-1754 · GHSA-82v9-h229-pq5f

Missing Authentication for Critical Function in GitLab

Priority LOW 30

An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed unauthenticated attackers to upload arbitrary files to publ…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00296 Published 2025-06-26 Fixed in 17.11.5, 18.0.3 +1 CWE-306
TI-2025-02566 CVE-2025-2938 · GHSA-xxvq-27rc-4q93

Business Logic Errors in GitLab

Priority MEDIUM 40

An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated users to gain elevated project privileges by…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00318 Published 2025-06-26 Fixed in 17.11.5, 18.0.3 +1 CWE-840
TI-2025-02871 CVE-2025-3279 · GHSA-qhv6-q9x7-ggmg

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 29

An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated attackers to create a DoS condition by sendin…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00381 Published 2025-06-26 Fixed in 17.11.5, 18.0.3 +1 CWE-770
TI-2025-04771 CVE-2025-5315 · GHSA-qf2w-qprx-c232

Missing Authorization in GitLab

Priority LOW 20

An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated users with Guest role permissions to add chil…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00264 Published 2025-06-26 Fixed in 17.11.5, 18.0.3 +1 CWE-862
TI-2025-05274 CVE-2025-5846 · GHSA-4wp9-h8xr-gvf2

Missing Authorization in GitLab

Priority LOW 20

An issue has been discovered in GitLab EE affecting all versions from 16.10 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated users to assign unrelated compliance frameworks…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00273 Published 2025-06-26 Fixed in 17.11.5, 18.0.3 +1 CWE-862