Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GitLab 16.10.5, 16.11.2, 16.9.7 Clear all filters
TI-2023-05689 CVE-2023-6195 · GHSA-2xjp-r9f7-cm2x

Server-Side Request Forgery (SSRF) in GitLab

Priority MEDIUM 53

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.5 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00327 Published 2025-01-30 Fixed in 16.9.7, 16.10.5 +1 CWE-918
TI-2024-01126 CVE-2024-1211 · GHSA-5xrw-g5h5-j2r6

Cross-Site Request Forgery (CSRF) in GitLab

Priority MEDIUM 40

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 in which cross-site request forgery m…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00306 Published 2025-01-30 Fixed in 16.9.7, 16.10.5 +1 CWE-352