GitLab vulnerabilities
1,178 CVEs and advisories name GitLab as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-5117Exposure of Sensitive Information Due to Incompatible Policies in GitLab
- CVE-2024-8116Incorrect Authorization in GitLab
- CVE-2024-8650Incorrect Authorization in GitLab
- CVE-2024-8179Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2024-8233Inefficient Algorithmic Complexity in GitLab
- CVE-2024-8647Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
- CVE-2024-9367Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2024-9387URL Redirection to Untrusted Site ('Open Redirect') in GitLab
- CVE-2024-10043Incorrect Authorization in GitLab
- CVE-2024-11274URL Redirection to Untrusted Site ('Open Redirect') in GitLab
- CVE-2024-12570Privilege Context Switching Error in GitLab
- CVE-2024-12292Insertion of Sensitive Information into Log File in GitLab
- CVE-2024-10240Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
- CVE-2024-11828Inefficient Algorithmic Complexity in GitLab
- CVE-2024-11669Incorrect Authorization in GitLab
- CVE-2024-8114Missing Authorization in GitLab
- CVE-2024-8177Inefficient Algorithmic Complexity in GitLab
- CVE-2024-8237Inefficient Algorithmic Complexity in GitLab
- CVE-2024-11668Insufficient Session Expiration in GitLab
- CVE-2024-9633Incorrect Ownership Assignment in GitLab
- CVE-2024-7404Improper Restriction of Rendered UI Layers or Frames in GitLab
- CVE-2024-8648Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2024-8180Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2024-9693Incorrect Authorization in GitLab
- CVE-2024-6826Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2024-8312Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2024-8970Incorrect Authorization in GitLab
- CVE-2024-5005Incorrect Provision of Specified Functionality in GitLab
- CVE-2024-9164Missing Authentication for Critical Function in GitLab
- CVE-2024-6530Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab