Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Release: GitLab 16.4.3, 16.5.3, 16.6.1 Clear all filters
TI-2023-03217 CVE-2023-3443 · GHSA-8fgm-gj9v-6jr5

Incorrect Authorization in GitLab

Priority LOW 20

An issue has been discovered in GitLab affecting all versions starting from 12.1 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00401 Published 2023-12-01 Fixed in 16.4.3, 16.5.3 +1 CWE-863
TI-2023-03681 CVE-2023-3964 · GHSA-7m6x-h8vx-f72m

Incorrect Authorization in GitLab

Priority MEDIUM 53

An issue has been discovered in GitLab affecting all versions starting from 13.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00491 Published 2023-12-01 Fixed in 16.4.3, 16.5.3 +1 CWE-863
TI-2023-03670 CVE-2023-3949 · GHSA-c3hq-3p4c-ch2w

Insertion of Sensitive Information Into Sent Data in GitLab

Priority MEDIUM 63

An issue has been discovered in GitLab affecting all versions starting from 11.3 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00592 Published 2023-12-01 Fixed in 16.4.3, 16.5.3 +1 CWE-201
TI-2023-03989 CVE-2023-4317 · GHSA-33j6-gqw4-wvvg

Incorrect Authorization in GitLab

Priority LOW 20

An issue has been discovered in GitLab affecting all versions starting from 9.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00426 Published 2023-12-01 Fixed in 16.4.3, 16.5.3 +1 CWE-863
TI-2023-04292 CVE-2023-4658 · GHSA-5p8h-m559-wpw7

Incorrect Authorization in GitLab

Priority LOW 16

An issue has been discovered in GitLab EE affecting all versions starting from 8.13 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00467 Published 2023-12-01 Fixed in 16.4.3, 16.5.3 +1 CWE-863
TI-2023-04523 CVE-2023-4912 · GHSA-cqvh-4wv3-g3cj

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 30

An issue has been discovered in GitLab EE affecting all versions starting from 10.5 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00574 Published 2023-12-01 Fixed in 16.4.3, 16.5.3 +1 CWE-770
TI-2023-04804 CVE-2023-5226 · GHSA-6wgj-fxqf-wxj2

Improper Control of Generation of Code ('Code Injection') in GitLab

Priority LOW 34

An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00546 Published 2023-12-01 Fixed in 16.4.3, 16.5.3 +1 CWE-94
TI-2023-05556 CVE-2023-6033 · GHSA-3xf7-rc79-2xq6

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority LOW 38

Improper neutralization of input in Jira integration configuration in GitLab CE/EE, affecting all versions from 15.10 prior to 16.6.1, 16.5 prior to 16.5.3, and 16.4 prior to 16.4.3 allows attacker to execute javascript…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00557 Published 2023-12-01 Fixed in 16.4.3, 16.5.3 +1 CWE-79
TI-2023-05524 CVE-2023-5995 · GHSA-jgpj-vfxg-97h5

Incorrect Authorization in GitLab

Priority LOW 34

An issue has been discovered in GitLab EE affecting all versions starting from 16.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00557 Published 2023-12-01 Fixed in 16.4.3, 16.5.3 +1 CWE-863