Browse CVEs

MEDIUM 6.5 CVE-2023-6678 An issue has been discovered in GitLab EE affecting all versions before 16.8.6, all versions starting from 16.9 before 16.9.4, all versions starting … GitLab 16.8.6 / 16.9.4+ Fix from $1,6002024-04-12 MEDIUM 5.4 CVE-2024-2279 An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.7 to 16.8.6 all versions starting from 16.9 before 16.9.4, all v… GitLab 16.8.6 / 16.9.4+ Fix from $1,6002024-04-12 MEDIUM 5.4 CVE-2024-3092 An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2… GitLab 16.9.4 / 16.10.2+ Fix from $1,6002024-04-12 MEDIUM 6.5 CVE-2024-2818 An issue has been discovered in GitLab CE/EE affecting all versions before 16.8.5, all versions starting from 16.9 before 16.9.3, all versions starti… GitLab 16.8.5 / 16.9.3+ Fix from $1,6002024-03-28 MEDIUM 5.4 CVE-2023-6371 An issue has been discovered in GitLab CE/EE affecting all versions before 16.8.5, all versions starting from 16.9 before 16.9.3, all versions starti… GitLab 16.8.5 / 16.9.3+ Fix from $1,6002024-03-28 HIGH 8.1 CVE-2024-1299 A privilege escalation vulnerability was discovered in GitLab affecting versions 16.8 prior to 16.8.4 and 16.9 prior to 16.9.2. It was possible for a… GitLab 16.8.4 / 16.9.2+ Fix from $1,9502024-03-07 HIGH 8.0 CVE-2024-0199 An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 1… GitLab 16.7.7 / 16.8.4+ Fix from $1,9502024-03-07 HIGH 8.7 CVE-2024-1451EPSS 51% An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.1. A crafted payload added to the user profile pa… GitLab Mitigation only Fix from $1,9502024-02-22 MEDIUM 5.3 CVE-2024-1525 An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.7.6, all versions starting from 16.8 before 16.8.3, … GitLab 16.7.6 / 16.8.3+ Fix from $1,6002024-02-22 HIGH 7.7 CVE-2024-0410 An authorization bypass vulnerability was discovered in GitLab affecting versions 15.1 prior to 16.7.6, 16.8 prior to 16.8.3, and 16.9 prior to 16.9.… GitLab 16.7.6 / 16.8.3+ Fix from $1,9502024-02-22 MEDIUM 6.7 CVE-2023-6477 An issue has been discovered in GitLab EE affecting all versions starting from 16.5 before 16.7.6, all versions starting from 16.8 before 16.8.3, all… GitLab 16.7.6+ Fix from $1,6002024-02-22 MEDIUM 5.4 CVE-2023-3509 An issue has been discovered in GitLab affecting all versions before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting fro… GitLab after 16.8.3 Fix from $1,6002024-02-21 MEDIUM 6.5 CVE-2024-1250 An issue has been discovered in GitLab EE affecting all versions starting from 16.8 before 16.8.2. When a user is assigned a custom role with manage_… GitLab 16.8.2+ Fix from $1,6002024-02-12 MEDIUM 6.5 CVE-2023-6564 An issue has been discovered in GitLab EE Premium and Ultimate affecting versions 16.4.3, 16.5.3, and 16.6.1. In projects using subgroups to define w… GitLab Mitigation only Fix from $1,6002024-02-08 MEDIUM 6.7 CVE-2023-6840 An issue has been discovered in GitLab EE affecting all versions from 16.4 prior to 16.6.7, 16.7 prior to 16.7.5, and 16.8 prior to 16.8.2 which allo… GitLab 16.6.7 / 16.7.5+ Fix from $1,6002024-02-07 MEDIUM 6.5 CVE-2023-6736 An issue has been discovered in GitLab EE affecting all versions starting from 11.3 before 16.7.6, all versions starting from 16.8 before 16.8.3, all… GitLab 16.7.6 / 16.8.3+ Fix from $1,6002024-02-07 MEDIUM 6.5 CVE-2024-1066 An issue has been discovered in GitLab EE affecting all versions from 13.3.0 prior to 16.6.7, 16.7 prior to 16.7.5, and 16.8 prior to 16.8.2 which al… GitLab 16.6.7 / 16.7.5+ Fix from $1,6002024-02-07 MEDIUM 6.5 CVE-2023-6159 An issue has been discovered in GitLab CE/EE affecting all versions from 12.7 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 It was … GitLab 16.6.6 / 16.7.4+ Fix from $1,6002024-01-26 MEDIUM 5.3 CVE-2023-5612 An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was possible to read … GitLab 16.6.6 / 16.7.4+ Fix from $1,6002024-01-26 CRITICAL 9.9 CVE-2024-0402 An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which a… GitLab 16.5.8 / 16.6.6+ Fix from $2,3002024-01-26 MEDIUM 5.4 CVE-2023-5933 An issue has been discovered in GitLab CE/EE affecting all versions after 13.7 before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. Imprope… GitLab 16.6.6 / 16.7.4+ Fix from $1,6002024-01-26 CRITICAL 9.8 CVE-2023-7028 KEVEPSS 95% An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior… GitLab 16.1.6 / 16.2.9+ Fix from $2,3002024-01-12 MEDIUM 5.3 CVE-2023-6955 A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6, 16.6 prior to 16.6.4 and 16.7… GitLab 16.5.6 / 16.6.4+ Fix from $1,6002024-01-12 HIGH 8.8 CVE-2023-5356 Incorrect authorization checks in GitLab CE/EE from all versions starting from 8.13 before 16.5.6, all versions starting from 16.6 before 16.6.4, all… GitLab 16.5.6 / 16.6.4+ Fix from $1,9502024-01-12 MEDIUM 5.3 CVE-2023-4812 An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting from 16.6 before 16.6.4, all… GitLab 16.5.5 / 16.6.4+ Fix from $1,6002024-01-12 MEDIUM 5.3 CVE-2023-2030 An issue has been discovered in GitLab CE/EE affecting all versions from 12.2 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in whic… GitLab 16.5.6 / 16.6.4+ Fix from $1,6002024-01-12 HIGH 8.8 CVE-2023-3907 A privilege escalation vulnerability in GitLab EE affecting all versions from 16.0 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 al… GitLab 16.4.4 / 16.5.4+ Fix from $1,9502023-12-17 HIGH 8.1 CVE-2023-6680 An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.… GitLab 16.4.4 / 16.5.4+ Fix from $1,9502023-12-15 MEDIUM 6.5 CVE-2023-6051 An issue has been discovered in GitLab CE/EE affecting all versions before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starti… GitLab 16.4.4 / 16.5.4+ Fix from $1,6002023-12-15 MEDIUM 5.7 CVE-2023-5512 An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versi… GitLab 16.4.4 / 16.5.4+ Fix from $1,6002023-12-15