Vulnerabilities > Gitlab > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-05-22 | CVE-2025-0605 | Unspecified vulnerability in Gitlab An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. | 4.3 |
| 2025-05-22 | CVE-2025-0679 | Privacy Violation vulnerability in Gitlab An issue has been discovered in GitLab CE/EE affecting all versions from 17.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. | 4.3 |
| 2025-05-22 | CVE-2025-0993 | Allocation of Resources Without Limits or Throttling vulnerability in Gitlab An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. | 6.5 |
| 2025-05-22 | CVE-2025-1110 | Insufficient Granularity of Access Control vulnerability in Gitlab 18.0.0 An issue has been discovered in GitLab CE/EE affecting all versions from 18.0 before 18.0.1. | 4.3 |
| 2025-05-22 | CVE-2025-2853 | Allocation of Resources Without Limits or Throttling vulnerability in Gitlab An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. | 6.5 |
| 2025-05-22 | CVE-2025-3111 | Allocation of Resources Without Limits or Throttling vulnerability in Gitlab An issue has been discovered in GitLab CE/EE affecting all versions from 10.2 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. | 6.5 |
| 2025-03-03 | CVE-2025-0555 | Cross-site Scripting vulnerability in Gitlab A Cross Site Scripting (XSS) vulnerability in GitLab-EE affecting all versions from 16.6 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1 allows an attacker to bypass security controls and execute arbitrary scripts in a users browser under specific conditions. | 6.1 |
| 2025-03-03 | CVE-2025-0475 | Cross-site Scripting vulnerability in Gitlab An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1. | 6.1 |
| 2025-03-03 | CVE-2024-8186 | Cross-site Scripting vulnerability in Gitlab An issue has been discovered in GitLab CE/EE affecting all versions from 16.6 before 17.7.6, 17.8 before 17.8.4, and 17.9 before 17.9.1. | 5.4 |
| 2024-11-26 | CVE-2024-10240 | Unspecified vulnerability in Gitlab An issue has been discovered in GitLab EE affecting all versions starting from 17.3 before 17.3.7, all versions starting from 17.4 before 17.4.4, all versions starting from 17.5 before 17.5.2 in which an unauthenticated user may be able to read some information about an MR in a private project, under certain circumstances. | 5.3 |