Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: GitLab 17.7.6, 17.8.4, 17.9.1 Clear all filters
TI-2025-00459 CVE-2025-0555 · GHSA-2862-gpw6-r482

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Priority LOW 36

A Cross Site Scripting (XSS) vulnerability in GitLab-EE affecting all versions from 16.6 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1 allows an attacker to bypass security controls and execute arbitrar…

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.00487 Published 2025-03-03 Fixed in 17.7.6, 17.8.4 +1 CWE-79
TI-2024-10127 CVE-2024-10925

Authorization Bypass Through User-Controlled Key in GitLab

Priority LOW 24

A vulnerability in GitLab-EE affecting all versions from 16.2 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1 allows a Guest user to read Security policy YAML

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00339 Published 2025-03-03 Fixed in 17.7.6, 17.8.4 +1 CWE-639