Vulnerabilities fixed in GitLab Enterprise Edition and Community Edition

🗓️ 26 Apr 2024 00:00:00Reported by NCSCType

GitLab fixed vulnerabilities in Enterprise and Community Editions that could cause denial of service or account takeover.

Reporter	Title	Published	Views	Family All 86
ATTACKERKB	CVE-2024-4024	25 Apr 202414:15	–	attackerkb
ATTACKERKB	CVE-2024-4006	25 Apr 202414:15	–	attackerkb
FreeBSD	Gitlab -- vulnerabilities	24 Apr 202400:00	–	freebsd
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from incorrect restrictions on the path name of the restricted directory. This allows attackers to expose protected information or cause service failures.	26 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Email Address Handler component of the software platform based on Git for collaborative code development on GitLab allows a malicious individual to gain unauthorized access to limited functions.	24 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Wildcard Filter Handler component in the Git-based software development platform allows a attacker to perform a “denial-of-service” attack.	24 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GraphQL Subscription Handler component of the software platform based on Git, which facilitates collaborative code development on GitLab, allows a malicious individual to gain unauthorized access to confidential information.	24 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Bitbucket Credentials Handler component of the Git-based software platform allows a hacker to gain control of a GitLab account associated with a Bitbucket account of another user, provided that Bitbucket is used as an OAuth 2.0 provider in GitLab.	24 Jul 202400:00	–	bdu_fstec
Circl	CVE-2024-1347	22 May 202504:43	–	circl
Circl	CVE-2024-2434	22 May 202504:42	–	circl