Vulnerabilities fixed in GitLab Enterprise Edition and Community Edition

🗓️ 27 May 2024 11:26:30Reported by NCSCType

GitLab fixed vulnerabilities in Enterprise and Community Editions, including XSS and DoS.

Reporter	Title	Published	Views	Family All 111
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to bypassing authentication using a user-controlled key, allows attackers to circumvent existing security restrictions.	17 Jun 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.	19 Jun 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the manipulation of inter-site requests, allows a perpetrator to carry out a CSRF attack.	19 Jun 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.	19 Jun 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out cross-site scripting attacks.	1 Jul 202400:00	–	bdu_fstec
Circl	CVE-2024-1947	26 Nov 202415:33	–	circl
Circl	CVE-2024-4835	23 May 202419:33	–	circl
CNNVD	GitLab CE/EE 安全漏洞	23 May 202400:00	–	cnnvd
CNNVD	GitLab CE/EE 安全漏洞	23 May 202400:00	–	cnnvd
CNNVD	GitLab 安全漏洞	23 May 202400:00	–	cnnvd

Vulners

Node

gitlab gitlabMatch16.10.5

gitlab gitlabMatch16.11.2

gitlab gitlabMatch17.0

Source	Link
about	www.about.gitlab.com/releases/2024/05/22/patch-release-gitlab-17-0-1-released/

27 May 2024 11:26Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.18 - 8.2

EPSS0.07452

SSVC