Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: GitLab 16.6.6, 16.7.4, 16.8.1 Clear all filters
TI-2023-05165 CVE-2023-5612 · GHSA-g884-f5hg-pgw8

Missing Authorization in GitLab

Priority LOW 38

An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04867 Published 2024-01-26 Fixed in 16.6.6, 16.7.4 +1 CWE-862
TI-2023-05664 CVE-2023-6159 · GHSA-6hch-mpjp-2743

Inefficient Regular Expression Complexity in GitLab

Priority LOW 31

An issue has been discovered in GitLab CE/EE affecting all versions from 12.7 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 It was possible for an attacker to trigger a Regular Expression Denial of Serv…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00987 Published 2024-01-26 Fixed in 16.6.6, 16.7.4 +1 CWE-1333
TI-2024-00417 CVE-2024-0456 · GHSA-mr56-56j8-x6r4

Direct Request ('Forced Browsing') in GitLab

Priority LOW 21

An authorization vulnerability exists in GitLab versions 14.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00488 Published 2024-01-26 Fixed in 16.6.6, 16.7.4 +1 CWE-425