Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: GitLab 17.2.8, 17.3.4, 17.4.1 Clear all filters
TI-2024-03819 CVE-2024-4099 · GHSA-8qr9-mc3w-88c6

Improper Encoding or Escaping of Output in GitLab

Priority LOW 24

An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00295 Published 2024-09-26 Fixed in 17.2.8, 17.3.4 +1 CWE-116
TI-2024-08333 CVE-2024-8974 · GHSA-vg85-gmcc-wrqw

Incorrect Provision of Specified Functionality in GitLab

Priority LOW 20

Information disclosure in Gitlab EE/CE affecting all versions from 15.6 prior to 17.2.8, 17.3 prior to 17.3.4, and 17.4 prior to 17.4.1 in specific conditions it was possible to disclose to an unauthorised user the path…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00292 Published 2024-09-26 Fixed in 17.2.8, 17.3.4 +1 CWE-684
TI-2024-03982 CVE-2024-4278 · GHSA-vfph-fvw4-j4xp

Incorrect Synchronization in GitLab

Priority LOW 24

An information disclosure issue has been discovered in GitLab EE affecting all versions starting from 16.5 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00234 Published 2024-09-26 Fixed in 17.2.8, 17.3.4 +1 CWE-821