Browse CVEs

HIGH 8.8 CVE-2024-8641 An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prio… GitLab 17.1.7 / 17.2.5+ Fix from $1,9502024-09-12 MEDIUM 6.5 CVE-2024-8311 An issue was discovered with pipeline execution policies in GitLab EE affecting all versions from 17.2 prior to 17.2.5, 17.3 prior to 17.3.2 which al… GitLab 17.2.5 / 17.3.2+ Fix from $1,6002024-09-12 MEDIUM 5.5 CVE-2024-4472 An issue was discovered in GitLab CE/EE affecting all versions starting from 16.5 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting f… GitLab 17.1.7 / 17.2.5+ Fix from $1,6002024-09-12 HIGH 8.8 CVE-2024-8640 An issue has been discovered in GitLab EE affecting all versions starting from 16.11 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior … GitLab 17.1.7 / 17.2.5+ Fix from $1,9502024-09-12 HIGH 8.1 CVE-2024-8754 An issue has been discovered in GitLab EE/CE affecting all versions from 16.9.7 prior to 17.1.7, 17.2 prior to 17.2.5, and 17.3 prior to 17.3.2. An i… GitLab 17.1.7 / 17.2.5+ Fix from $1,9502024-09-12 HIGH 7.5 CVE-2024-8124EPSS 40% An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.1.7, starting from 17.2 prior to 17.2.5, starting from … GitLab 17.1.7 / 17.2.5+ Fix from $1,9502024-09-12 HIGH 7.2 CVE-2024-8631 A privilege escalation issue has been discovered in GitLab EE affecting all versions starting from 16.6 prior to 17.1.7, from 17.2 prior to 17.2.5, a… GitLab 17.1.7 / 17.2.5+ Fix from $1,9502024-09-12 MEDIUM 6.5 CVE-2024-8635 A server-side request forgery issue has been discovered in GitLab EE affecting all versions starting from 16.8 prior to 17.1.7, from 17.2 prior to 17… GitLab 17.1.7 / 17.2.5+ Fix from $1,6002024-09-12 MEDIUM 6.5 CVE-2024-5435 An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 15.10 before 17.1.7, all versions starting from 17.2 bef… GitLab 17.1.7 / 17.2.5+ Fix from $1,6002024-09-12 CRITICAL 9.1 CVE-2024-2743 An issue was discovered in GitLab-EE starting with version 13.3 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2 that would allow an attacke… GitLab 17.1.7 / 17.2.5+ Fix from $2,3002024-09-12 HIGH 7.5 CVE-2024-4660 An issue has been discovered in GitLab EE affecting all versions starting from 11.2 before 17.1.7, all versions starting from 17.2 before 17.2.5, all… GitLab 17.1.7 / 17.2.5+ Fix from $1,9502024-09-12 MEDIUM 6.1 CVE-2024-4612 An issue has been discovered in GitLab EE affecting all versions starting from 12.9 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under … GitLab 17.1.7 / 17.2.5+ Fix from $1,6002024-09-12 MEDIUM 6.5 CVE-2024-6502 An issue was discovered in GitLab CE/EE affecting all versions starting from 8.2 prior to 17.1.6 starting from 17.2 prior to 17.2.4, and starting fro… GitLab 17.1.6 / 17.2.4+ Fix from $1,6002024-08-22 MEDIUM 6.5 CVE-2024-8041 A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions prior to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 1… GitLab 17.1.6 / 17.2.4+ Fix from $1,6002024-08-22 MEDIUM 6.4 CVE-2024-7110 An issue was discovered in GitLab EE affecting all versions starting 17.0 to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1 allows an attacke… GitLab 17.1.6 / 17.2.4+ Fix from $1,6002024-08-22 MEDIUM 6.5 CVE-2024-5423 Multiple Denial of Service (DoS) conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0 prior to 17.0.6, starting fr… GitLab 17.0.6 / 17.1.4+ Fix from $1,6002024-08-08 MEDIUM 6.5 CVE-2024-7554 An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9 before 17.0.6, all versions starting from 17.1 before 17.1.4, … GitLab 17.0.6 / 17.1.4+ Fix from $1,6002024-08-08 MEDIUM 6.5 CVE-2024-7610 A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions starting with 15.9 before 17.0.6, 17.1 prior to 17.1.4… GitLab 17.0.6 / 17.1.4+ Fix from $1,6002024-08-08 MEDIUM 5.4 CVE-2024-4207 A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 prior 17.0.6, starting from 17.1 prior to 17.1.4,… GitLab 17.0.6 / 17.1.4+ Fix from $1,6002024-08-08 HIGH 8.1 CVE-2024-3035 A permission check vulnerability in GitLab CE/EE affecting all versions starting from 8.12 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 1… GitLab 17.0.6 / 17.1.4+ Fix from $1,9502024-08-08 HIGH 7.5 CVE-2024-2800 ReDoS flaw in RefMatcher when matching branch names using wildcards in GitLab EE/CE affecting all versions from 11.3 prior to 17.0.6, 17.1 prior to 1… GitLab 17.0.6 / 17.1.4+ Fix from $1,9502024-08-08 MEDIUM 6.5 CVE-2024-3114 An issue was discovered in GitLab CE/EE affecting all versions starting from 11.10 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2, w… GitLab 17.0.6 / 17.1.4+ Fix from $1,6002024-08-08 MEDIUM 6.5 CVE-2024-3958 An issue has been discovered in GitLab CE/EE affecting all versions before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. An issue was found… GitLab 17.0.6 / 17.1.4+ Fix from $1,6002024-08-08 HIGH 7.5 CVE-2024-6329 An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting f… GitLab 17.0.6 / 17.1.4+ Fix from $1,9502024-08-08 MEDIUM 6.5 CVE-2024-4210 A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions starting with 12.6 before 17.0.6, 17.1 prior to 17.1.4… GitLab 17.0.6 / 17.1.4+ Fix from $1,6002024-08-08 MEDIUM 5.4 CVE-2024-4784 An issue was discovered in GitLab EE starting from version 16.7 before 17.0.6, version 17.1 before 17.1.4 and 17.2 before 17.2.2 that allowed bypassi… GitLab 17.0.6 / 17.1.4+ Fix from $1,6002024-08-08 MEDIUM 5.4 CVE-2024-7047 A cross site scripting vulnerability exists in GitLab CE/EE affecting all versions from 16.6 prior to 17.0.5, 17.1 prior to 17.1.3, 17.2 prior to 17.… GitLab 17.0.5 / 17.1.3+ Fix from $1,6002024-07-25 MEDIUM 5.0 CVE-2024-7091 An issue was discovered in GitLab CE/EE affecting all versions starting from 15.6 prior to 17.0.5, starting from 17.1 prior to 17.1.3, and starting f… GitLab 17.0.5 / 17.1.3+ Fix from $1,6002024-07-24 MEDIUM 6.5 CVE-2024-7060 An information disclosure vulnerability in GitLab CE/EE in project/group exports affecting all versions from 15.4 prior to 17.0.5, 17.1 prior to 17.1… GitLab 17.0.5 / 17.1.3+ Fix from $1,6002024-07-24 MEDIUM 5.3 CVE-2024-6595 An issue was discovered in GitLab CE/EE affecting all versions starting from 11.8 prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting … GitLab 16.11.6 / 17.0.4+ Fix from $1,6002024-07-17