Vulnerabilities fixed in GitLab Enterprise Edition and Community Edition

🗓️ 04 Jul 2024 06:45:26Reported by NCSCType

GitLab fixed vulnerabilities in Enterprise and Community editions; flaws may cause denial of service or data tampering.

Reporter	Title	Published	Views	Family All 208
FreeBSD	Gitlab -- Vulnerabilities	26 Jun 202400:00	–	freebsd
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in access control, allowing attackers to execute arbitrary code.	28 Jun 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Single Sign-On (SSO) authentication mechanism of the GitLab Duo Chat web interface, a software platform based on git for collaborative code development on GitLab, allows a malicious individual to gain unauthorized access to protected information.	15 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the use of a regular expression c with inefficient computational complexity, allowing attackers to trigger service interruptions.	15 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.	15 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to access control deficiencies, allows attackers to disclose protected information.	15 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to improper authentication, allows a perpetrator to gain unauthorized access to protected information.	15 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.	9 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the implementation of the Global Search technology in the software platform based on git for collaborative code development on GitLab allows a perpetrator to disclose protected information.	9 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the OAuth-based software platform implementation for Git-based collaborative code development on GitLab allows a perpetrator to carry out a Cross-Window Forgery attack.	9 Oct 202400:00	–	bdu_fstec