Priority LOW 24
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.5 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3 prior to 17.3.2, where dependency proxy credentials are retain…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00218 · Published 2024-09-12 · Fixed in 17.1.7, 17.3.2 +1 CWE-532
Priority MEDIUM 47
An issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3 prior to 17.3.2, which allows an attacker to trigger a pipelin…
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.01989 · Published 2024-09-12 · Fixed in 17.1.7, 17.2.5 +1 CWE-290
Priority MEDIUM 41
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00579 · Published 2024-09-12 · Fixed in 17.1.7, 17.2.5 +1 CWE-270
Priority LOW 32
A privilege escalation issue has been discovered in GitLab EE affecting all versions starting from 16.6 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00526 · Published 2024-09-12 · Fixed in 17.1.7, 17.2.5 +1 CWE-267
Priority LOW 38
An issue has been discovered in GitLab EE/CE affecting all versions from 16.9.7 prior to 17.1.7, 17.2 prior to 17.2.5, and 17.3 prior to 17.3.2.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00432 · Published 2024-09-12 · Fixed in 17.1.7, 17.2.5 +1 CWE-642
Priority LOW 34
A server-side request forgery issue has been discovered in GitLab EE affecting all versions starting from 16.8 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00555 · Published 2024-09-12 · Fixed in 17.1.7, 17.2.5 +1 CWE-918
Priority LOW 39
An issue was discovered in GitLab-EE starting with version 13.3 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2 that would allow an attacker to modify an on-demand DAST scan without permissions and leak variabl…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00403 · Published 2024-09-12 · Fixed in 17.1.7, 17.2.5 +1 CWE-863
Priority LOW 31
An issue has been discovered in GitLab EE affecting all versions starting from 12.9 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · User interaction · EPSS 0.00389 · Published 2024-09-12 · Fixed in 17.1.7, 17.2.5 +1 CWE-601
Priority LOW 34
An issue has been discovered in GitLab EE affecting all versions starting from 11.2 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00608 · Published 2024-09-12 · Fixed in 17.1.7, 17.2.5 +1 CWE-862
Priority LOW 29
An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 15.10 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2 will disclose…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0046 · Published 2024-09-12 · Fixed in 17.1.7, 17.2.5 +1 CWE-209
Priority LOW 17
An issue has been discovered in GitLab affecting all versions starting from 17.1 to 17.1.7, 17.2 prior to 17.2.5 and 17.3 prior to 17.3.2.
CVSS 3.1LOW 3.5· Network · Low privileges · User interaction · EPSS 0.00409 · Published 2024-09-12 · Fixed in 17.1.7, 17.2.5 +1 CWE-840
Priority LOW 20
An issue was discovered in GitLab-CE/EE affecting all versions starting with 17.0 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00434 · Published 2024-09-12 · Fixed in 17.1.7, 17.2.5 +1 CWE-497
Priority HIGH 66
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.1.7, starting from 17.2 prior to 17.2.5, starting from 17.3 prior to 17.3.2 which could cause Denial of Service via sending a…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.40245 · Published 2024-09-12 · Fixed in 17.1.7, 17.2.5 +1 CWE-1333
Priority MEDIUM 42
An issue has been discovered in GitLab EE affecting all versions starting from 16.11 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00993 · Published 2024-09-12 · Fixed in 17.1.7, 17.2.5 +1 CWE-77