Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: GitLab 16.10.4, 16.11.1, 16.9.6 Clear all filters
TI-2024-03753 CVE-2024-4024 · GHSA-pvxf-9mm4-92xf

Authentication Bypass by Assumed-Immutable Data in GitLab

Priority MEDIUM 56

An issue has been discovered in GitLab CE/EE affecting all versions starting from 7.8 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.14903 Published 2024-04-25 Fixed in 16.9.6, 16.10.4 +1 CWE-302
TI-2024-03738 CVE-2024-4006 · GHSA-vjph-qj4m-f5g8

Incorrect Authorization in GitLab

Priority LOW 20

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.7 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1 where personal access…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00468 Published 2024-04-25 Fixed in 16.9.6, 16.10.4 +1 CWE-863
TI-2024-01255 CVE-2024-1347 · GHSA-2x3p-pww2-fg9r

Authentication Bypass by Spoofing in GitLab

Priority LOW 25

An issue has been discovered in GitLab CE/EE affecting all versions before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00473 Published 2024-04-25 Partial fix · 16.9.6, 16.10.4 +1 CWE-290
TI-2024-02262 CVE-2024-2434 · GHSA-gwr5-7mcm-726j

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

Priority MEDIUM 57

An issue has been discovered in GitLab affecting all versions of GitLab CE/EE 16.9 prior to 16.9.6, 16.10 prior to 16.10.4, and 16.11 prior to 16.11.1 where path traversal could lead to DoS and restricted file read.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.23178 Published 2024-04-25 Partial fix · 16.9.6, 16.10.4 +1 CWE-22
TI-2024-02639 CVE-2024-2829 · GHSA-c2wf-8j59-jjhc

Inefficient Regular Expression Complexity in GitLab

Priority MEDIUM 54

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.5 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.25965 Published 2024-04-25 Partial fix · 16.9.6, 16.10.4 +1 CWE-1333