Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

14 records

Priority LOW 24

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.5 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3 prior to 17.3.2, where dependency proxy credentials are retain…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00218 Published 2024-09-12 Fixed in 17.1.7, 17.3.2 +1 CWE-532
Priority MEDIUM 47

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3 prior to 17.3.2, which allows an attacker to trigger a pipelin…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01989 Published 2024-09-12 Fixed in 17.1.7, 17.2.5 +1 CWE-290
Priority MEDIUM 41

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00579 Published 2024-09-12 Fixed in 17.1.7, 17.2.5 +1 CWE-270
Priority LOW 32

A privilege escalation issue has been discovered in GitLab EE affecting all versions starting from 16.6 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00526 Published 2024-09-12 Fixed in 17.1.7, 17.2.5 +1 CWE-267
Priority LOW 38

An issue has been discovered in GitLab EE/CE affecting all versions from 16.9.7 prior to 17.1.7, 17.2 prior to 17.2.5, and 17.3 prior to 17.3.2.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00432 Published 2024-09-12 Fixed in 17.1.7, 17.2.5 +1 CWE-642
Priority LOW 34

A server-side request forgery issue has been discovered in GitLab EE affecting all versions starting from 16.8 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00555 Published 2024-09-12 Fixed in 17.1.7, 17.2.5 +1 CWE-918
TI-2024-02555 CVE-2024-2743 · GHSA-254h-gvgq-x2xg

Incorrect Authorization in GitLab

Priority LOW 39

An issue was discovered in GitLab-EE starting with version 13.3 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2 that would allow an attacker to modify an on-demand DAST scan without permissions and leak variabl…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00403 Published 2024-09-12 Fixed in 17.1.7, 17.2.5 +1 CWE-863
Priority LOW 31

An issue has been discovered in GitLab EE affecting all versions starting from 12.9 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2.

CVSS 3.1MEDIUM 6.4 Network Low privileges User interaction EPSS 0.00389 Published 2024-09-12 Fixed in 17.1.7, 17.2.5 +1 CWE-601
TI-2024-04335 CVE-2024-4660 · GHSA-2c6m-54c4-x2fg

Missing Authorization in GitLab

Priority LOW 34

An issue has been discovered in GitLab EE affecting all versions starting from 11.2 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00608 Published 2024-09-12 Fixed in 17.1.7, 17.2.5 +1 CWE-862
Priority LOW 29

An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 15.10 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2 will disclose…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0046 Published 2024-09-12 Fixed in 17.1.7, 17.2.5 +1 CWE-209
TI-2024-05983 CVE-2024-6446 · GHSA-xh98-rwp8-8rpw

Business Logic Errors in GitLab

Priority LOW 17

An issue has been discovered in GitLab affecting all versions starting from 17.1 to 17.1.7, 17.2 prior to 17.2.5 and 17.3 prior to 17.3.2.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00409 Published 2024-09-12 Fixed in 17.1.7, 17.2.5 +1 CWE-840
Priority HIGH 66

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.1.7, starting from 17.2 prior to 17.2.5, starting from 17.3 prior to 17.3.2 which could cause Denial of Service via sending a…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.40245 Published 2024-09-12 Fixed in 17.1.7, 17.2.5 +1 CWE-1333