Skip to contentGitlab vulnerabilities
Newest
- gitlabServer-Side Request Forgery (SSRF) in GitLabCVE-2024-8977Fix available8.2 High
- gitlabInclusion of Sensitive Information in Source Code in GitLabCVE-2024-9596Fix available3.7 Low
- gitlabIncorrect Authorization in GitLabCVE-2024-9623Fix available4.9 Medium
- gitlabExposure of Sensitive Information Due to Incompatible Policies in GitLabCVE-2023-3441Fix available6.6 Medium
- gitlabImproper Encoding or Escaping of Output in GitLabCVE-2024-40993.1 Low
- gitlabIncorrect Provision of Specified Functionality in GitLabCVE-2024-8974Fix available2.6 Low
- gitlabIncorrect Synchronization in GitLabCVE-2024-4278Fix available5.5 Medium
- gitlabURL Redirection to Untrusted Site ('Open Redirect') in GitLabCVE-2024-4283Fix available6.4 Medium
- gitlabAuthorization Bypass Through User-Controlled Key in GitLabCVE-2024-6685Fix available3.1 Low
- gitlabImproper Protection of Alternate Path in GitLabCVE-2024-8311Fix available6.5 Medium
- gitlabInsertion of Sensitive Information into Log File in GitLabCVE-2024-4472Fix available4.0 Medium
- gitlabAuthentication Bypass by Spoofing in GitLabCVE-2024-6678Public exploitFix available9.9 Critical
- gitlabPrivilege Context Switching Error in GitLabCVE-2024-8641Fix available6.7 Medium
- gitlabPrivilege Defined With Unsafe Actions in GitLabCVE-2024-8631Fix available5.5 Medium
- gitlabExternal Control of Critical State Data in GitLabCVE-2024-8754Fix available6.4 Medium
- gitlabServer-Side Request Forgery (SSRF) in GitLabCVE-2024-8635Fix available7.7 High
- gitlabIncorrect Authorization in GitLabCVE-2024-2743Fix available5.3 Medium
- gitlabURL Redirection to Untrusted Site ('Open Redirect') in GitLabCVE-2024-4612Fix available6.4 Medium
- gitlabMissing Authorization in GitLabCVE-2024-4660Fix available6.5 Medium
- gitlabGeneration of Error Message Containing Sensitive Information in GitLabCVE-2024-5435Fix available4.5 Medium
- gitlabBusiness Logic Errors in GitLabCVE-2024-6446Fix available3.5 Low
- gitlabExposure of Sensitive System Information to an Unauthorized Control Sphere in GitLabCVE-2024-6389Fix available4.3 Medium
- gitlabInefficient Regular Expression Complexity in GitLabCVE-2024-8124Fix availableEPSS 40.2%7.5 High
- gitlabImproper Neutralization of Special Elements used in a Command ('Command Injection') in GitLabCVE-2024-8640Fix available8.5 High
- omniauth saml, onelogin ruby-saml, gitlab +1 more +3 moreThe Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selectorCVE-2024-45409Public exploitFix availableEPSS 12.5%10.0 Critical
- gitlabImproper Access Control in GitLabCVE-2024-3127Fix available4.3 Medium
- gitlabIncorrect Provision of Specified Functionality in GitLabCVE-2024-6502Fix available5.7 Medium
- gitlabImproper Neutralization of Special Elements used in a Command ('Command Injection') in GitLabCVE-2024-7110Fix available6.4 Medium
- gitlabUncontrolled Resource Consumption in GitLabCVE-2024-8041Fix available6.5 Medium
- gitlabUncontrolled Resource Consumption in GitLabCVE-2024-2800Fix available6.5 Medium
- gitlabAuthorization Bypass Through User-Controlled Key in GitLabCVE-2024-3035Fix available6.8 Medium
- gitlabUncontrolled Resource Consumption in GitLabCVE-2024-3114Fix available4.3 Medium
- gitlabImproper Control of Generation of Code ('Code Injection') in GitLabCVE-2024-3958Fix available5.3 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2024-4207Fix available4.4 Medium
- gitlabUncontrolled Resource Consumption in GitLabCVE-2024-5423Fix available6.5 Medium
- gitlabExposure of Sensitive Information to an Unauthorized Actor in GitLabCVE-2024-7554Fix available4.9 Medium
- gitlabUncontrolled Resource Consumption in GitLabCVE-2024-7610Fix available4.3 Medium
- gitlabUncontrolled Resource Consumption in GitLabCVE-2024-4210Fix available6.5 Medium
- gitlabAuthentication Bypass by Primary Weakness in GitLabCVE-2024-4784Fix available4.2 Medium
- gitlabImproper Encoding or Escaping of Output in GitLabCVE-2024-6329Fix available5.7 Medium
- gitlabImproper Access Control in GitLabCVE-2024-7057Fix available4.3 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2024-7047Fix available7.7 High
- gitlabImproper Control of Resource Identifiers ('Resource Injection') in GitLabCVE-2024-0231Fix available2.7 Low
- gitlabExposure of Sensitive Information to an Unauthorized Actor in GitLabCVE-2024-5067Fix available4.4 Medium
- gitlabExposure of Sensitive Information to an Unauthorized Actor in GitLabCVE-2024-7060Fix available2.6 Low
- gitlabExposure of Sensitive Information to an Unauthorized Actor in GitLabCVE-2024-7091Fix available4.1 Medium
- gitlabUncontrolled Search Path Element in GitLabCVE-2024-6595Fix available3.0 Low
- gitlabImproper Access Control in GitLabCVE-2024-2880Fix available2.7 Low
- gitlabImproper Access Control in GitLabCVE-2024-5257Fix available4.9 Medium
- gitlabImproper Access Control in GitLabCVE-2024-5470Fix available3.8 Low
- Show moreLoading…