Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Release: GitLab 16.3.6, 16.4.2, 16.5.1 Clear all filters
TI-2023-04332 CVE-2023-4700 · GHSA-j8mj-5fpw-2pc8

Missing Authorization in GitLab

Priority LOW 29

An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1, allowed a user to run jobs in protected environments, bypassing any required ap…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0045 Published 2023-11-06 Fixed in 16.3.6, 16.4.2 +1 CWE-862
TI-2023-05494 CVE-2023-5963 · GHSA-5rfm-2gcw-59ww

Allocation of Resources Without Limits or Throttling in GitLab

Priority LOW 21

An issue has been discovered in GitLab EE with Advanced Search affecting all versions from 13.9 to 16.3.6, 16.4 prior to 16.4.2 and 16.5 prior to 16.5.1 that could allow a denial of service in the Advanced Search functio…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0058 Published 2023-11-06 Fixed in 16.3.6, 16.4.2 +1 CWE-770
TI-2023-03179 CVE-2023-3399 · GHSA-wrm3-h327-j8wh

Insertion of Sensitive Information Into Sent Data in GitLab

Priority HIGH 70

An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00537 Published 2023-11-06 Fixed in 16.3.6, 16.4.2 +1 CWE-201
TI-2023-03649 CVE-2023-3909 · GHSA-8mrc-cw5j-72jw

Inefficient Regular Expression Complexity in GitLab

Priority LOW 30

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.3 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00725 Published 2023-11-06 Fixed in 16.3.6, 16.4.2 +1 CWE-1333
TI-2023-03042 CVE-2023-3246 · GHSA-xh7q-hg94-4g3m

Allocation of Resources Without Limits or Throttling in GitLab

Priority MEDIUM 53

An issue has been discovered in GitLab EE/CE affecting all versions starting before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1 which allows an attackers to block…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00635 Published 2023-11-06 Fixed in 16.3.6, 16.4.2 +1 CWE-770
TI-2023-05361 CVE-2023-5825 · GHSA-gwvc-g4vv-pjx6

Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab

Priority MEDIUM 62

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.2 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0077 Published 2023-11-06 Fixed in 16.3.6, 16.4.2 +1 CWE-835
TI-2023-05367 CVE-2023-5831 · GHSA-53xh-mr6w-445f

Insertion of Sensitive Information Into Sent Data in GitLab

Priority LOW 31

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, and all versions starting from 16.5.0 before 16.5.1 which have the `sup…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00545 Published 2023-11-06 Fixed in 16.3.6, 16.4.2 +1 CWE-201