Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: GitLab 16.4.4, 16.5.4, 16.6.2 Clear all filters
TI-2023-04661 CVE-2023-5061 · GHSA-v64g-f7qf-63xm

Missing Authorization in GitLab

Priority MEDIUM 53

An issue has been discovered in GitLab affecting all versions starting from 9.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00428 Published 2023-12-15 Fixed in 16.4.4, 16.5.4 +1 CWE-862
TI-2023-05073 CVE-2023-5512 · GHSA-3vp4-9jc4-q799

Improper Control of Generation of Code ('Code Injection') in GitLab

Priority LOW 26

An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00494 Published 2023-12-15 Fixed in 16.4.4, 16.5.4 +1 CWE-94
TI-2023-05572 CVE-2023-6051 · GHSA-pq7v-xh7j-pwmx

Improper Control of Generation of Code ('Code Injection') in GitLab

Priority LOW 30

An issue has been discovered in GitLab CE/EE affecting all versions before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00632 Published 2023-12-15 Fixed in 16.4.4, 16.5.4 +1 CWE-94
TI-2023-06110 CVE-2023-6680 · GHSA-wpj8-2grx-f965

Improper Certificate Validation in GitLab

Priority LOW 35

An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows an attacker to authenticate as ano…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00376 Published 2023-12-15 Fixed in 16.4.4, 16.5.4 +1 CWE-295
TI-2023-03277 CVE-2023-3511 · GHSA-ghrj-rqcw-5xqp

Incorrect Authorization in GitLab

Priority LOW 17

An issue has been discovered in GitLab EE affecting all versions starting from 8.17 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00395 Published 2023-12-15 Fixed in 16.4.4, 16.5.4 +1 CWE-863