Browse CVEs

HIGH 7.5 CVE-2024-12380 An issue was discovered in GitLab EE/CE affecting all versions starting from 11.5 before 17.7.7, all versions starting from 17.8 before 17.8.5, all v… GitLab 17.7.7 / 17.8.5+ Fix from $1,9502025-03-13 MEDIUM 6.5 CVE-2024-13054 An issue was discovered in GitLab CE/EE affecting all versions before 17.7.7, 17.8 prior to 17.8.5, and 17.9 prior to 17.9.2. where a denial of servi… GitLab 17.7.7 / 17.8.5+ Fix from $1,6002025-03-13 MEDIUM 6.1 CVE-2025-0555 A Cross Site Scripting (XSS) vulnerability in GitLab-EE affecting all versions from 16.6 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.… GitLab 17.7.6 / 17.8.4+ Fix from $1,6002025-03-03 MEDIUM 6.1 CVE-2025-0475 An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1. A pro… GitLab 17.7.6 / 17.8.4+ Fix from $1,6002025-03-03 MEDIUM 5.3 CVE-2024-10925 A vulnerability in GitLab-EE affecting all versions from 16.2 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1 allows a Guest user to … GitLab 17.7.6 / 17.8.4+ Fix from $1,6002025-03-03 MEDIUM 5.4 CVE-2024-8186 An issue has been discovered in GitLab CE/EE affecting all versions from 16.6 before 17.7.6, 17.8 before 17.8.4, and 17.9 before 17.9.1. An attacker … GitLab 17.7.6 / 17.8.4+ Fix from $1,6002025-03-03 MEDIUM 5.7 CVE-2024-3303 An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from… GitLab 17.6.5 / 17.7.4+ Fix from $1,6002025-02-13 MEDIUM 5.3 CVE-2025-1198 An issue discovered in GitLab CE/EE affecting all versions from 16.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 meant that long… GitLab 17.6.5 / 17.7.4+ Fix from $1,6002025-02-13 MEDIUM 6.6 CVE-2024-8266 An issue was discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.6.0, which allows an attacker with maintainer role to t… GitLab 17.6.0+ Fix from $1,6002025-02-13 HIGH 7.5 CVE-2024-7102 An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.0 which allows an attacker to trigger a pipeline as a… GitLab 17.5.0+ Fix from $1,9502025-02-13 HIGH 8.8 CVE-2024-9870 An external service interaction vulnerability in GitLab EE affecting all versions from 15.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to… GitLab 17.6.5 / 17.7.4+ Fix from $1,9502025-02-12 HIGH 7.5 CVE-2025-1212 An information disclosure vulnerability in GitLab CE/EE affecting all versions from 8.3 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8… GitLab 17.6.5 / 17.7.4+ Fix from $1,9502025-02-12 HIGH 7.5 CVE-2025-1042 An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior… GitLab 17.6.5 / 17.7.4+ Fix from $1,9502025-02-12 MEDIUM 6.1 CVE-2025-0376 An XSS vulnerability exists in GitLab CE/EE affecting all versions from 13.3 prior to 17.6.5, 17.7 prior to 17.7.4 and 17.8 prior to 17.8.2 that allo… GitLab 17.6.5 / 17.7.4+ Fix from $1,6002025-02-12 MEDIUM 6.5 CVE-2024-12379 A denial of service vulnerability in GitLab CE/EE affecting all versions from 14.1 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 al… GitLab 17.6.5 / 17.7.4+ Fix from $1,6002025-02-12 MEDIUM 6.1 CVE-2024-10383 An issue has been discovered in the gitlab-web-ide-vscode-fork component distributed over CDN affecting all versions prior to 1.89.1-1.0.0-dev-202411… GitLab 17.3.0+ Fix from $1,6002025-02-07 MEDIUM 6.5 CVE-2025-1072 A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions starting from 7.14.1 prior to 17.3.7, 17.4 prior to 17.4.4… GitLab 17.3.7 / 17.4.4+ Fix from $1,6002025-02-07 HIGH 7.5 CVE-2024-2878EPSS 19% An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and sta… GitLab 16.9.7 / 16.10.5+ Fix from $1,9502025-02-05 MEDIUM 6.5 CVE-2024-3976 An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and sta… GitLab 16.9.7 / 16.10.5+ Fix from $1,6002025-02-05 HIGH 7.5 CVE-2024-9631 An issue was discovered in GitLab CE/EE affecting all versions starting from 13.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting f… GitLab 17.2.9 / 17.3.5+ Fix from $1,9502025-02-05 MEDIUM 5.4 CVE-2024-5528 An issue was discovered in GitLab CE/EE affecting all versions prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to … GitLab 16.11.6 / 17.0.4+ Fix from $1,6002025-02-05 HIGH 7.5 CVE-2023-6386 A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15.11 prior to 16.6.7, 16.7 prior to 16.7.5 and 16.8 pr… GitLab 16.6.7 / 16.7.5+ Fix from $1,9502025-02-05 MEDIUM 5.3 CVE-2024-1539 An issue has been discovered in GitLab EE affecting all versions starting from 15.2 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starti… GitLab 16.9.7 / 16.10.5+ Fix from $1,6002025-02-05 HIGH 8.8 CVE-2024-1211 An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and sta… GitLab 16.9.7 / 16.10.5+ Fix from $1,9502025-01-31 MEDIUM 6.1 CVE-2025-0314 An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.6.4, 17.7 before 17.7.3, and 17.8 before 17.8.1. Improper ren… GitLab 17.6.4 / 17.7.3+ Fix from $1,6002025-01-24 MEDIUM 5.3 CVE-2024-11931 An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.6.4, from 17.7 prior to 17.7.3, and from 17.8 prio… GitLab 17.6.4 / 17.7.3+ Fix from $1,6002025-01-24 MEDIUM 5.4 CVE-2024-13041 An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting f… GitLab 17.5.5 / 17.6.3+ Fix from $1,6002025-01-09 MEDIUM 6.5 CVE-2025-0194 An issue was discovered in GitLab CE/EE affecting all versions starting from 17.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting f… GitLab 17.5.5 / 17.6.3+ Fix from $1,6002025-01-08 MEDIUM 5.3 CVE-2024-8116 An issue has been discovered in GitLab CE/EE affecting all versions from 16.9 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. By using a s… GitLab 17.4.6 / 17.5.4+ Fix from $1,6002024-12-16 MEDIUM 5.3 CVE-2024-8650 An issue was discovered in GitLab CE/EE affecting all versions from 15.0 prior to 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior to 17.6.2 that allowed… GitLab 17.4.6 / 17.5.4+ Fix from $1,6002024-12-16