Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: GitLab 16.10.6, 16.11.3, 17.0.1 Clear all filters
TI-2023-05959 CVE-2023-6502 · GHSA-9xx7-rp3v-8694

Inefficient Regular Expression Complexity in GitLab

Priority LOW 29

A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11 before 16.11.3, and 17.0 before 17.0.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00505 Published 2024-05-23 Fixed in 16.10.6, 16.11.3 +1 CWE-1333
TI-2023-06441 CVE-2023-7045 · GHSA-mmc8-x8mq-826c

Cross-Site Request Forgery (CSRF) in GitLab

Priority LOW 27

A CSRF vulnerability exists within GitLab CE/EE from versions 13.11 before 16.10.6, from 16.11 before 16.11.3, from 17.0 before 17.0.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00286 Published 2024-05-23 Fixed in 16.10.6, 16.11.3 +1 CWE-352
TI-2024-01813 CVE-2024-1947 · GHSA-h2fc-m4gm-6mg8

Improper Handling of Highly Compressed Data (Data Amplification) in GitLab

Priority LOW 29

A denial of service (DoS) condition was discovered in GitLab CE/EE affecting all versions from 13.2.4 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0048 Published 2024-05-23 Fixed in 16.10.6, 16.11.3 +1 CWE-409
TI-2024-04882 CVE-2024-5258 · GHSA-w2rm-x498-v7f9

Authorization Bypass Through User-Controlled Key in GitLab

Priority LOW 20

An authorization vulnerability exists within GitLab from versions 16.10 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1 where an authenticated attacker could utilize a crafted naming convention to bypass pip…

CVSS 3.1MEDIUM 4.4 Network Low privileges User interaction EPSS 0.00277 Published 2024-05-23 Fixed in 16.10.6, 16.11.3 +1 CWE-639
TI-2024-02683 CVE-2024-2874 · GHSA-r6p6-7q5h-jc4x

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 30

An issue has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11 before 16.11.3, and 17.0 before 17.0.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00632 Published 2024-05-23 Fixed in 16.10.6, 16.11.3 +1 CWE-770