Vulnerabilities > Gitlab

DATE CVE VULNERABILITY TITLE RISK
2024-06-27 CVE-2024-6323 Incorrect Authorization vulnerability in Gitlab
Improper authorization in global search in GitLab EE affecting all versions from 16.11 prior to 16.11.5 and 17.0 prior to 17.0.3 and 17.1 prior to 17.1.1 allows an attacker leak content of a private repository in a public project.
network
low complexity
gitlab CWE-863
7.5
2024-06-14 CVE-2024-5469 Improper Check for Unusual or Exceptional Conditions vulnerability in Gitlab
DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC requests.
network
low complexity
gitlab CWE-754
4.3
2024-06-12 CVE-2024-1495 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.1 prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2.
network
low complexity
gitlab
6.5
2024-06-12 CVE-2024-1736 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2.
network
low complexity
gitlab
6.5
2024-06-12 CVE-2024-1963 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.4 prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2.
network
low complexity
gitlab
6.5
2024-06-12 CVE-2024-4201 Cross-site Scripting vulnerability in Gitlab
A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 16.10.7, all versions starting from 16.11 before 16.111.4, all versions starting from 17.0 before 17.0.2.
network
high complexity
gitlab CWE-79
4.4
2024-02-22 CVE-2023-4895 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab EE affecting all versions starting from 12.0 to 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1.
network
low complexity
gitlab
4.3
2024-02-22 CVE-2023-6477 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab EE affecting all versions starting from 16.5 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1.
network
low complexity
gitlab
6.7
2024-02-22 CVE-2024-0410 Unspecified vulnerability in Gitlab
An authorization bypass vulnerability was discovered in GitLab affecting versions 15.1 prior to 16.7.6, 16.8 prior to 16.8.3, and 16.9 prior to 16.9.1.
network
high complexity
gitlab
7.7
2024-02-22 CVE-2024-0861 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab EE affecting all versions starting from 16.4 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1.
network
low complexity
gitlab
4.3