Advisories · Technology

GitLab.

Every CVE that names GitLab among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-4210 CVE record

CVSS 6.5 Medium

Uncontrolled Resource Consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 8 Aug 2024
CVE-2024-4784 CVE record

CVSS 4.2 Medium

Authentication Bypass by Primary Weakness in GitLab
- GitLab
- CWE-305
Not analysed yet 8 Aug 2024
CVE-2024-6329 CVE record

CVSS 5.7 Medium

Improper Encoding or Escaping of Output in GitLab
- GitLab
- CWE-116
Not analysed yet 8 Aug 2024
CVE-2024-7057 CVE record

CVSS 4.3 Medium

Improper Access Control in GitLab
- GitLab
- Broken access control
Not analysed yet 25 Jul 2024
CVE-2024-7047 CVE record

CVSS 7.7 High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 25 Jul 2024
CVE-2024-0231 CVE record

CVSS 2.7 Low

Improper Control of Resource Identifiers ('Resource Injection') in GitLab
- GitLab
- CWE-99
Not analysed yet 24 Jul 2024
CVE-2024-5067 CVE record

CVSS 4.4 Medium

Exposure of Sensitive Information to an Unauthorized Actor in GitLab
- GitLab
- Information disclosure
Not analysed yet 24 Jul 2024
CVE-2024-7060 CVE record

CVSS 2.6 Low

Exposure of Sensitive Information to an Unauthorized Actor in GitLab
- GitLab
- Information disclosure
Not analysed yet 24 Jul 2024
CVE-2024-7091 CVE record

CVSS 4.1 Medium

Exposure of Sensitive Information to an Unauthorized Actor in GitLab
- GitLab
- Information disclosure
Not analysed yet 24 Jul 2024
CVE-2024-6595 CVE record

CVSS 3.0 Low

Uncontrolled Search Path Element in GitLab
- GitLab
- CWE-451
Not analysed yet 17 Jul 2024
CVE-2024-2880 CVE record

CVSS 2.7 Low

Improper Access Control in GitLab
- GitLab
- Broken access control
Not analysed yet 11 Jul 2024
CVE-2024-5257 CVE record

CVSS 4.9 Medium

Improper Access Control in GitLab
- GitLab
- Broken access control
Not analysed yet 11 Jul 2024
CVE-2024-5470 CVE record

CVSS 3.8 Low

Improper Access Control in GitLab
- GitLab
- Broken access control
Not analysed yet 11 Jul 2024
CVE-2024-6385 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Improper Access Control in GitLab
- GitLab
- Broken access control
Not analysed yet 11 Jul 2024
CVE-2024-2177 CVE record

CVSS 6.8 Medium

Improper Restriction of Rendered UI Layers or Frames in GitLab
- GitLab
- CWE-1021
Not analysed yet 9 Jul 2024
CVE-2024-1493 CVE record

CVSS 6.5 Medium

Uncontrolled Resource Consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 26 Jun 2024
CVE-2024-1816 CVE record

CVSS 5.3 Medium

Uncontrolled Resource Consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 26 Jun 2024
CVE-2024-2191 CVE record

CVSS 5.3 Medium

Improper Access Control in GitLab
- GitLab
- Broken access control
Not analysed yet 26 Jun 2024
CVE-2024-3115 CVE record

CVSS 4.3 Medium

Exposure of Sensitive Information to an Unauthorized Actor in GitLab
- GitLab
- Broken access control
Not analysed yet 26 Jun 2024
CVE-2024-3959 CVE record

CVSS 6.5 Medium

Improper Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 26 Jun 2024
CVE-2024-4011 CVE record

CVSS 3.1 Low

Improper Access Control in GitLab
- GitLab
- Broken access control
Not analysed yet 26 Jun 2024
CVE-2024-4557 CVE record

CVSS 6.5 Medium

Uncontrolled Resource Consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 26 Jun 2024
CVE-2024-4901 CVE record

CVSS 8.7 HighCritical · CVSS 7+ and EPSS

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 26 Jun 2024
CVE-2024-5655 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Improper Access Control in GitLab
- GitLab
- Broken access control
Not analysed yet 26 Jun 2024
CVE-2024-5430 CVE record

CVSS 6.8 Medium

Improper Access Control in GitLab
- GitLab
- Broken access control
Not analysed yet 26 Jun 2024
CVE-2024-6323 CVE record

CVSS 7.5 High

Improper Isolation or Compartmentalization in GitLab
- GitLab
- Broken access control
Not analysed yet 26 Jun 2024
CVE-2024-5469 CVE record

CVSS 3.1 Low

Uncontrolled Resource Consumption in GitLab
- GitLab
- CWE-754
Not analysed yet 14 Jun 2024
CVE-2024-1736 CVE record

CVSS 6.5 Medium

Uncontrolled Resource Consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 12 Jun 2024
CVE-2024-1495 CVE record

CVSS 6.5 Medium

Uncontrolled Resource Consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 12 Jun 2024
CVE-2024-1963 CVE record

CVSS 6.5 Medium

Uncontrolled Resource Consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 12 Jun 2024
CVE-2024-4201 CVE record

CVSS 4.4 Medium

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 12 Jun 2024
CVE-2024-5318 CVE record

CVSS 4.0 Medium

Missing Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 24 May 2024
CVE-2023-6502 CVE record

CVSS 4.3 Medium

Inefficient Regular Expression Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 23 May 2024
CVE-2023-7045 CVE record

CVSS 5.4 Medium

Cross-Site Request Forgery (CSRF) in GitLab
- GitLab
- Cross-site request forgery (CSRF)
Not analysed yet 23 May 2024
CVE-2024-1947 CVE record

CVSS 4.3 Medium

Improper Handling of Highly Compressed Data (Data Amplification) in GitLab
- GitLab
- CWE-409
Not analysed yet 23 May 2024
CVE-2024-5258 CVE record

CVSS 4.4 Medium

Authorization Bypass Through User-Controlled Key in GitLab
- GitLab
- Broken access control
Not analysed yet 23 May 2024
CVE-2024-2874 CVE record

CVSS 6.5 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 23 May 2024
CVE-2024-4835 CVE record

CVSS 8.0 High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 23 May 2024
CVE-2023-6682 CVE record

CVSS 6.5 Medium

Inefficient Regular Expression Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 9 May 2024
CVE-2023-6688 CVE record

CVSS 6.5 Medium

Inefficient Regular Expression Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 9 May 2024
CVE-2024-2454 CVE record

CVSS 6.5 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 9 May 2024
CVE-2024-2651 CVE record

CVSS 6.5 Medium

Inefficient Regular Expression Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 9 May 2024
CVE-2024-4539 CVE record

CVSS 4.3 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 9 May 2024
CVE-2024-4597 CVE record

CVSS 5.7 Medium

Cross-Site Request Forgery (CSRF) in GitLab
- GitLab
- Cross-site request forgery (CSRF)
Not analysed yet 9 May 2024
CVE-2024-4024 CVE record

CVSS 7.3 HighCritical · CVSS 7+ and EPSS

Authentication Bypass by Assumed-Immutable Data in GitLab
- GitLab
- CWE-302
Not analysed yet 25 Apr 2024
CVE-2024-4006 CVE record

CVSS 4.3 Medium

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 25 Apr 2024
CVE-2024-1347 CVE record

CVSS 4.3 Medium

Authentication Bypass by Spoofing in GitLab
- GitLab
- Authentication bypass
Not analysed yet 25 Apr 2024
CVE-2024-2434 CVE record

CVSS 8.5 HighCritical · CVSS 7+ and EPSS

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
- GitLab
- Path traversal
Not analysed yet 25 Apr 2024
CVE-2024-2829 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Inefficient Regular Expression Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 25 Apr 2024
CVE-2023-6489 CVE record

CVSS 4.3 Medium

Inefficient Regular Expression Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 12 Apr 2024
CVE-2023-6678 CVE record

CVSS 4.3 Medium

Inefficient Regular Expression Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 12 Apr 2024
CVE-2024-2279 CVE record

CVSS 8.7 High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 12 Apr 2024
CVE-2024-3092 CVE record

CVSS 8.7 High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 12 Apr 2024
CVE-2023-6371 CVE record

CVSS 8.7 High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 28 Mar 2024
CVE-2024-2818 CVE record

CVSS 4.3 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 28 Mar 2024
CVE-2024-0199 CVE record

CVSS 7.7 High

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 7 Mar 2024
CVE-2024-1299 CVE record

CVSS 6.5 Medium

Privilege Chaining in GitLab
- GitLab
- Privilege escalation
Not analysed yet 7 Mar 2024
CVE-2023-4895 CVE record

CVSS 4.3 Medium

Missing Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 22 Feb 2024
CVE-2023-6477 CVE record

CVSS 6.7 Medium

Incorrect Privilege Assignment in GitLab
- GitLab
- Privilege escalation
Not analysed yet 21 Feb 2024
CVE-2024-0410 CVE record

CVSS 7.7 High

Improper Enforcement of Behavioral Workflow in GitLab
- GitLab
- CWE-841
Not analysed yet 21 Feb 2024