Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: GitLab 16.7.6, 16.8.3, 16.9.1 Clear all filters
TI-2023-05937 CVE-2023-6477 · GHSA-x645-349v-xwm6

Incorrect Privilege Assignment in GitLab

Priority LOW 32

An issue has been discovered in GitLab EE affecting all versions starting from 16.5 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1.

CVSS 3.1MEDIUM 6.7 Network High privileges No interaction EPSS 0.0053 Published 2024-02-21 Fixed in 16.7.6, 16.8.3 +1 CWE-266
TI-2024-00372 CVE-2024-0410 · GHSA-27r2-6rqh-xrg8

Improper Enforcement of Behavioral Workflow in GitLab

Priority LOW 36

An authorization bypass vulnerability was discovered in GitLab affecting versions 15.1 prior to 16.7.6, 16.8 prior to 16.8.3, and 16.9 prior to 16.9.1.

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.00458 Published 2024-02-21 Fixed in 16.7.6, 16.8.3 +1 CWE-841
TI-2024-01422 CVE-2024-1525 · GHSA-2v36-29xm-jp89

Authentication Bypass Using an Alternate Path or Channel in GitLab

Priority LOW 24

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00449 Published 2024-02-21 Fixed in 16.7.6, 16.8.3 +1 CWE-288
TI-2024-00795 CVE-2024-0861 · GHSA-32j2-p2qq-hh3c

Direct Request ('Forced Browsing') in GitLab

Priority MEDIUM 53

An issue has been discovered in GitLab EE affecting all versions starting from 16.4 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00404 Published 2024-02-21 Fixed in 16.9.1, 16.8.3 +1 CWE-425
TI-2023-03275 CVE-2023-3509 · GHSA-vwj5-wr4r-cq36

Incorrect Authorization in GitLab

Priority LOW 24

An issue has been discovered in GitLab affecting all versions before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00325 Published 2024-02-21 Fixed in 16.7.6, 16.8.3 +1 CWE-863