Vulnerabilities > Gitlab > Gitlab > 2.9.0

DATE CVE VULNERABILITY TITLE RISK
2024-09-10 CVE-2024-45409 The Ruby SAML library is for implementing the client side of a SAML authorization.
network
low complexity
onelogin omniauth gitlab
critical
9.8
2024-08-22 CVE-2024-8041 Unspecified vulnerability in Gitlab
A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions prior to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1.
network
low complexity
gitlab
6.5
2024-08-08 CVE-2024-3958 Code Injection vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2.
network
low complexity
gitlab CWE-94
6.5
2024-08-08 CVE-2024-5423 Unspecified vulnerability in Gitlab
Multiple Denial of Service (DoS) conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2 which allowed an attacker to cause resource exhaustion via banzai pipeline.
network
low complexity
gitlab
6.5
2024-06-27 CVE-2024-4557 Resource Exhaustion vulnerability in Gitlab
Multiple Denial of Service (DoS) conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1 which allowed an attacker to cause resource exhaustion via banzai pipeline.
network
low complexity
gitlab CWE-400
6.5
2024-06-12 CVE-2024-1736 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2.
network
low complexity
gitlab
6.5
2024-05-23 CVE-2023-6502 Unspecified vulnerability in Gitlab
A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11 before 16.11.3, and 17.0 before 17.0.1.
network
low complexity
gitlab
6.5
2024-05-23 CVE-2024-2874 Allocation of Resources Without Limits or Throttling vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11 before 16.11.3, and 17.0 before 17.0.1.
network
low complexity
gitlab CWE-770
6.5
2024-05-14 CVE-2024-2651 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions before 16.9.7, all versions starting from 16.10 before 16.10.5, all versions starting from 16.11 before 16.11.2.
network
low complexity
gitlab
6.5
2024-04-25 CVE-2024-1347 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1.
network
low complexity
gitlab
5.3