Advisories · Technology

GitLab.

Every CVE that names GitLab among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-9367 CVE record

CVSS 4.3 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 12 Dec 2024
CVE-2024-9387 CVE record

CVSS 6.4 Medium

URL Redirection to Untrusted Site ('Open Redirect') in GitLab
- GitLab
- Open redirect
Not analysed yet 12 Dec 2024
CVE-2024-10043 CVE record

CVSS 3.1 Low

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 12 Dec 2024
CVE-2024-11274 CVE record

CVSS 8.7 High

URL Redirection to Untrusted Site ('Open Redirect') in GitLab
- GitLab
- Open redirect
Not analysed yet 12 Dec 2024
CVE-2024-12570 CVE record

CVSS 6.7 Medium

Privilege Context Switching Error in GitLab
- GitLab
- Privilege escalation
Not analysed yet 12 Dec 2024
CVE-2024-12292 CVE record

CVSS 4.0 Medium

Insertion of Sensitive Information into Log File in GitLab
- GitLab
- Information disclosure
Not analysed yet 12 Dec 2024
CVE-2024-10240 CVE record

CVSS 5.3 Medium

Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
- GitLab
- Information disclosure
Not analysed yet 26 Nov 2024
CVE-2024-11828 CVE record

CVSS 4.3 Medium

Inefficient Algorithmic Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 26 Nov 2024
CVE-2024-11669 CVE record

CVSS 6.5 Medium

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 26 Nov 2024
CVE-2024-8114 CVE record

CVSS 8.2 High

Missing Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 26 Nov 2024
CVE-2024-8177 CVE record

CVSS 5.3 Medium

Inefficient Algorithmic Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 26 Nov 2024
CVE-2024-8237 CVE record

CVSS 6.5 Medium

Inefficient Algorithmic Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 26 Nov 2024
CVE-2024-11668 CVE record

CVSS 4.2 Medium

Insufficient Session Expiration in GitLab
- GitLab
- Authentication bypass
Not analysed yet 26 Nov 2024
CVE-2024-9633 CVE record

CVSS 3.1 Low

Incorrect Ownership Assignment in GitLab
- GitLab
- CWE-708
Not analysed yet 14 Nov 2024
CVE-2024-7404 CVE record

CVSS 6.8 Medium

Improper Restriction of Rendered UI Layers or Frames in GitLab
- GitLab
- CWE-1021
Not analysed yet 14 Nov 2024
CVE-2024-8648 CVE record

CVSS 6.1 Medium

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 14 Nov 2024
CVE-2024-8180 CVE record

CVSS 5.4 Medium

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 14 Nov 2024
CVE-2024-9693 CVE record

CVSS 8.5 High

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 14 Nov 2024
CVE-2024-6826 CVE record

CVSS 6.5 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 24 Oct 2024
CVE-2024-8312 CVE record

CVSS 8.7 High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 24 Oct 2024
CVE-2024-8970 CVE record

CVSS 8.2 High

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 11 Oct 2024
CVE-2024-5005 CVE record

CVSS 4.3 Medium

Incorrect Provision of Specified Functionality in GitLab
- GitLab
- CWE-684
Not analysed yet 11 Oct 2024
CVE-2024-9164 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Missing Authentication for Critical Function in GitLab
- GitLab
- Authentication bypass
Not analysed yet 11 Oct 2024
CVE-2024-6530 CVE record

CVSS 7.3 High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 10 Oct 2024
CVE-2024-8977 CVE record

CVSS 8.2 High

Server-Side Request Forgery (SSRF) in GitLab
- GitLab
- Server-side request forgery (SSRF)
Not analysed yet 10 Oct 2024
CVE-2024-9596 CVE record

CVSS 3.7 Low

Inclusion of Sensitive Information in Source Code in GitLab
- GitLab
- CWE-540
Not analysed yet 10 Oct 2024
CVE-2024-9623 CVE record

CVSS 4.9 Medium

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 10 Oct 2024
CVE-2023-3441 CVE record

CVSS 6.6 Medium

Exposure of Sensitive Information Due to Incompatible Policies in GitLab
- GitLab
- CWE-213
Not analysed yet 1 Oct 2024
CVE-2024-4099 CVE record

CVSS 3.1 Low

Improper Encoding or Escaping of Output in GitLab
- GitLab
- CWE-116
Not analysed yet 26 Sept 2024
CVE-2024-8974 CVE record

CVSS 2.6 Low

Incorrect Provision of Specified Functionality in GitLab
- GitLab
- CWE-684
Not analysed yet 26 Sept 2024
CVE-2024-4278 CVE record

CVSS 5.5 Medium

Incorrect Synchronization in GitLab
- GitLab
- CWE-821
Not analysed yet 26 Sept 2024
CVE-2024-4283 CVE record

CVSS 6.4 Medium

URL Redirection to Untrusted Site ('Open Redirect') in GitLab
- GitLab
- Open redirect
Not analysed yet 16 Sept 2024
CVE-2024-6685 CVE record

CVSS 3.1 Low

Authorization Bypass Through User-Controlled Key in GitLab
- GitLab
- Broken access control
Not analysed yet 16 Sept 2024
CVE-2024-8311 CVE record

CVSS 6.5 Medium

Improper Protection of Alternate Path in GitLab
- GitLab
- CWE-424
Not analysed yet 12 Sept 2024
CVE-2024-4472 CVE record

CVSS 4.0 Medium

Insertion of Sensitive Information into Log File in GitLab
- GitLab
- Information disclosure
Not analysed yet 12 Sept 2024
CVE-2024-6678 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Authentication Bypass by Spoofing in GitLab
- GitLab
- Authentication bypass
Not analysed yet 12 Sept 2024
CVE-2024-8641 CVE record

CVSS 6.7 Medium

Privilege Context Switching Error in GitLab
- GitLab
- Privilege escalation
Not analysed yet 12 Sept 2024
CVE-2024-8631 CVE record

CVSS 5.5 Medium

Privilege Defined With Unsafe Actions in GitLab
- GitLab
- Privilege escalation
Not analysed yet 12 Sept 2024
CVE-2024-8754 CVE record

CVSS 6.4 Medium

External Control of Critical State Data in GitLab
- GitLab
- CWE-642
Not analysed yet 12 Sept 2024
CVE-2024-8635 CVE record

CVSS 7.7 High

Server-Side Request Forgery (SSRF) in GitLab
- GitLab
- Server-side request forgery (SSRF)
Not analysed yet 12 Sept 2024
CVE-2024-2743 CVE record

CVSS 5.3 Medium

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 12 Sept 2024
CVE-2024-4612 CVE record

CVSS 6.4 Medium

URL Redirection to Untrusted Site ('Open Redirect') in GitLab
- GitLab
- Open redirect
Not analysed yet 12 Sept 2024
CVE-2024-4660 CVE record

CVSS 6.5 Medium

Missing Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 12 Sept 2024
CVE-2024-5435 CVE record

CVSS 4.5 Medium

Generation of Error Message Containing Sensitive Information in GitLab
- GitLab
- Information disclosure
Not analysed yet 12 Sept 2024
CVE-2024-6446 CVE record

CVSS 3.5 Low

Business Logic Errors in GitLab
- GitLab
- CWE-840
Not analysed yet 12 Sept 2024
CVE-2024-6389 CVE record

CVSS 4.3 Medium

Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
- GitLab
- Information disclosure
Not analysed yet 12 Sept 2024
CVE-2024-8124 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Inefficient Regular Expression Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 12 Sept 2024
CVE-2024-8640 CVE record

CVSS 8.5 High

Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
- GitLab
- Command injection
Not analysed yet 12 Sept 2024
CVE-2024-3127 CVE record

CVSS 4.3 Medium

Improper Access Control in GitLab
- GitLab
- Broken access control
Not analysed yet 22 Aug 2024
CVE-2024-6502 CVE record

CVSS 5.7 Medium

Incorrect Provision of Specified Functionality in GitLab
- GitLab
- CWE-684
Not analysed yet 22 Aug 2024
CVE-2024-7110 CVE record

CVSS 6.4 Medium

Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
- GitLab
- Command injection
Not analysed yet 22 Aug 2024
CVE-2024-8041 CVE record

CVSS 6.5 Medium

Uncontrolled Resource Consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 22 Aug 2024
CVE-2024-2800 CVE record

CVSS 6.5 Medium

Uncontrolled Resource Consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 8 Aug 2024
CVE-2024-3035 CVE record

CVSS 6.8 Medium

Authorization Bypass Through User-Controlled Key in GitLab
- GitLab
- Broken access control
Not analysed yet 8 Aug 2024
CVE-2024-3114 CVE record

CVSS 4.3 Medium

Uncontrolled Resource Consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 8 Aug 2024
CVE-2024-3958 CVE record

CVSS 5.3 Medium

Improper Control of Generation of Code ('Code Injection') in GitLab
- GitLab
- Code injection
Not analysed yet 8 Aug 2024
CVE-2024-4207 CVE record

CVSS 4.4 Medium

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 8 Aug 2024
CVE-2024-5423 CVE record

CVSS 6.5 Medium

Uncontrolled Resource Consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 8 Aug 2024
CVE-2024-7554 CVE record

CVSS 4.9 Medium

Exposure of Sensitive Information to an Unauthorized Actor in GitLab
- GitLab
- Information disclosure
Not analysed yet 8 Aug 2024
CVE-2024-7610 CVE record

CVSS 4.3 Medium

Uncontrolled Resource Consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 8 Aug 2024