Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GitLab 17.1.7, 17.2.5, 17.3.2 Clear all filters
TI-2024-03987 CVE-2024-4283 · GHSA-fgvw-2v52-jhfv

URL Redirection to Untrusted Site ('Open Redirect') in GitLab

Priority LOW 31

An issue has been discovered in GitLab EE affecting all versions starting from 11.1 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2.

CVSS 3.1MEDIUM 6.4 Network Low privileges User interaction EPSS 0.00375 Published 2024-09-16 Fixed in 17.1.7, 17.2.5 +1 CWE-601
TI-2024-06195 CVE-2024-6685 · GHSA-272r-9r62-xgwc

Authorization Bypass Through User-Controlled Key in GitLab

Priority LOW 20

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 17.1.7, 17.2 prior to 17.2.5, and 17.3 prior to 17.3.2, where group runners information was disclosed to unauthorised group membe…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00372 Published 2024-09-16 Fixed in 17.1.7, 17.2.5 +1 CWE-639