Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: GitLab 16.10.5, 16.11.2, 16.9.7 Clear all filters
TI-2024-02686 CVE-2024-2878 · GHSA-mx9x-fhqg-ggrp

Allocation of Resources Without Limits or Throttling in GitLab

Priority MEDIUM 57

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.19726 Published 2025-02-05 Fixed in 16.9.7, 16.10.5 +1 CWE-770
TI-2024-03709 CVE-2024-3976 · GHSA-px4x-cjpp-hqv5

Missing Authorization in GitLab

Priority LOW 30

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00624 Published 2025-02-05 Fixed in 16.9.7, 16.10.5 +1 CWE-862
TI-2024-01436 CVE-2024-1539 · GHSA-4rf9-gv7f-cc74

Missing Authorization in GitLab

Priority LOW 24

An issue has been discovered in GitLab EE affecting all versions starting from 15.2 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00377 Published 2025-02-05 Fixed in 16.9.7, 16.10.5 +1 CWE-862