Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GitLab 16.6.7, 16.7.5, 16.8.2 Clear all filters
TI-2023-06245 CVE-2023-6840 · GHSA-8jj6-7vgp-rg47

Missing Authorization in GitLab

Priority MEDIUM 63

An issue has been discovered in GitLab EE affecting all versions from 16.4 prior to 16.6.7, 16.7 prior to 16.7.5, and 16.8 prior to 16.8.2 which allows a maintainer to change the name of a protected branch that bypasses…

CVSS 3.1MEDIUM 6.7 Network High privileges No interaction EPSS 0.00558 Published 2024-02-07 Fixed in 16.6.7, 16.7.5 +1 CWE-862
TI-2024-00987 CVE-2024-1066 · GHSA-89x8-fvq4-x5w3

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 30

An issue has been discovered in GitLab EE affecting all versions from 13.3.0 prior to 16.6.7, 16.7 prior to 16.7.5, and 16.8 prior to 16.8.2 which allows an attacker to do a resource exhaustion using GraphQL `vulnerabili…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00631 Published 2024-02-07 Fixed in 16.6.7, 16.7.5 +1 CWE-770