Search CVE reports
1 – 10 of 14 results
CVE-2024-6385
Medium priorityAn issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2, which allows an attacker to trigger a pipeline as...
2 affected packages
gitlab, gitlab-agent
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
gitlab | Not in release | Not in release | Not in release | — | Needs evaluation |
gitlab-agent | Needs evaluation | Not in release | Not in release | — | — |
CVE-2024-5470
Medium priorityAn issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Guest user with `admin_push_rules` permission may have been able to create project-level deploy tokens.
2 affected packages
gitlab, gitlab-agent
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
gitlab | Not in release | Not in release | Not in release | — | Needs evaluation |
gitlab-agent | Needs evaluation | Not in release | Not in release | — | — |
CVE-2024-5257
Medium priorityAn issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Developer user with `admin_compliance_framework` custom role may have been able to modify the...
2 affected packages
gitlab, gitlab-agent
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
gitlab | Not in release | Not in release | Not in release | — | Needs evaluation |
gitlab-agent | Needs evaluation | Not in release | Not in release | — | — |
CVE-2024-2880
Medium priorityAn issue was discovered in GitLab CE/EE affecting all versions starting from 16.5 prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2 in which a user with `admin_group_member` custom role...
2 affected packages
gitlab, gitlab-agent
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
gitlab | Not in release | Not in release | Not in release | — | Needs evaluation |
gitlab-agent | Needs evaluation | Not in release | Not in release | — | — |
CVE-2024-4024
Medium priorityAn issue has been discovered in GitLab CE/EE affecting all versions starting from 7.8 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1. Under certain conditions, an...
2 affected packages
gitlab, gitlab-agent
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
gitlab | Not in release | Not in release | Not in release | — | Ignored |
gitlab-agent | Needs evaluation | Not in release | Not in release | — | — |
CVE-2024-4006
Medium priorityAn issue has been discovered in GitLab CE/EE affecting all versions starting from 16.7 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1 where personal access scopes...
2 affected packages
gitlab, gitlab-agent
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
gitlab | Not in release | Not in release | Not in release | — | Ignored |
gitlab-agent | Needs evaluation | Not in release | Not in release | — | — |
CVE-2024-2829
Medium priorityAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.5 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1. A crafted wildcard filter in...
2 affected packages
gitlab, gitlab-agent
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
gitlab | Not in release | Not in release | Not in release | — | Ignored |
gitlab-agent | Needs evaluation | Not in release | Not in release | — | — |
CVE-2024-2434
Medium priorityAn issue has been discovered in GitLab affecting all versions of GitLab CE/EE 16.9 prior to 16.9.6, 16.10 prior to 16.10.4, and 16.11 prior to 16.11.1 where path traversal could lead to DoS and restricted file read.
2 affected packages
gitlab, gitlab-agent
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
gitlab | Not in release | Not in release | Not in release | — | Ignored |
gitlab-agent | Needs evaluation | Not in release | Not in release | — | — |
CVE-2024-1347
Medium priorityAn issue has been discovered in GitLab CE/EE affecting all versions before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1. Under certain conditions, an attacker through a...
2 affected packages
gitlab, gitlab-agent
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
gitlab | Not in release | Not in release | Not in release | — | Ignored |
gitlab-agent | Needs evaluation | Not in release | Not in release | — | — |
CVE-2023-3399
Medium priorityAn issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. It was possible for an unauthorised...
2 affected packages
gitlab, gitlab-agent
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
gitlab | Not in release | Not in release | Not in release | — | Needs evaluation |
gitlab-agent | Needs evaluation | Not in release | Not in release | — | — |