Vulnerabilities > Gitlab > Medium

DATE CVE VULNERABILITY TITLE RISK
2025-03-03 CVE-2025-0555 Cross-site Scripting vulnerability in Gitlab
A Cross Site Scripting (XSS) vulnerability in GitLab-EE affecting all versions from 16.6 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1 allows an attacker to bypass security controls and execute arbitrary scripts in a users browser under specific conditions.
network
low complexity
gitlab CWE-79
6.1
2025-03-03 CVE-2025-0475 Cross-site Scripting vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1.
network
low complexity
gitlab CWE-79
6.1
2025-03-03 CVE-2024-8186 Cross-site Scripting vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions from 16.6 before 17.7.6, 17.8 before 17.8.4, and 17.9 before 17.9.1.
network
low complexity
gitlab CWE-79
5.4
2024-11-26 CVE-2024-10240 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab EE affecting all versions starting from 17.3 before 17.3.7, all versions starting from 17.4 before 17.4.4, all versions starting from 17.5 before 17.5.2 in which an unauthenticated user may be able to read some information about an MR in a private project, under certain circumstances.
network
low complexity
gitlab
5.3
2024-11-26 CVE-2024-11668 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions from 16.11 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1.
network
low complexity
gitlab
5.3
2024-11-14 CVE-2024-7404 Improper Restriction of Rendered UI Layers or Frames vulnerability in Gitlab
An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 prior to 17.3.7, starting from 17.4 prior to 17.4.4 and starting from 17.5 prior to 17.5.2, which could have allowed an attacker gaining full API access as the victim via the Device OAuth flow.
network
low complexity
gitlab CWE-1021
6.5
2024-11-14 CVE-2024-8648 Cross-site Scripting vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions from 16 before 17.3.7, 17.4 before 17.4.4, and 17.5 before 17.5.2.
network
low complexity
gitlab CWE-79
6.1
2024-11-14 CVE-2024-8180 Cross-site Scripting vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.3.7, 17.4 before 17.4.4, and 17.5 before 17.5.2.
network
low complexity
gitlab CWE-79
5.4
2024-10-24 CVE-2024-6826 Allocation of Resources Without Limits or Throttling vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 17.3.6, 17.4 before 17.4.3, and 17.5 before 17.5.1.
network
low complexity
gitlab CWE-770
6.5
2024-10-24 CVE-2024-8312 Cross-site Scripting vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 17.3.6, 17.4 before 17.4.3, and 17.5 before 17.5.1.
network
low complexity
gitlab CWE-79
5.4