Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: GitLab 17.10.5, 17.11.1, 17.9.7 Clear all filters
TI-2024-11356 CVE-2024-12244 · GHSA-43w4-f729-298m

Missing Authorization in GitLab

Priority LOW 20

An issue has been discovered in access controls could allow users to view certain restricted project information even when related features are disabled in GitLab EE, affecting all versions from 17.7 prior to 17.9.7, 17.…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00311 Published 2025-04-24 Fixed in 17.9.7, 17.10.5 +1 CWE-862
TI-2025-00539 CVE-2025-0639 · GHSA-9963-8j6c-xr65

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 33

An issue has been discovered affecting service availability via issue preview in GitLab CE/EE affecting all versions from 16.7 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0046 Published 2025-04-24 Fixed in 17.9.7, 17.10.5 +1 CWE-770
TI-2025-01653 CVE-2025-1908 · GHSA-h38g-w8gh-4m6m

Business Logic Errors in GitLab

Priority LOW 36

An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 1…

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.00393 Published 2025-04-24 Fixed in 17.9.7, 17.10.5 +1 CWE-840