Vulnerabilities fixed in GitLab Enterprise Edition and Community Edition

🗓️ 12 Aug 2024 08:24:49Reported by NCSCType

GitLab Community Edition and Enterprise Edition fixed vulnerabilities; updates for 17.2.2, 17.1.4, 17.0.6 prevent DoS and unauthorized access.

Reporter	Title	Published	Views	Family All 180
FreeBSD	Gitlab -- Vulnerabilities	7 Aug 202400:00	–	freebsd
BDU FSTEC	The vulnerability of Banzai Pipeline, a software platform based on Git for collaborative code development on GitLab, allows a hacker to trigger a service failure.	12 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to improper code generation management, allows a hacker to execute arbitrary code.	12 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to an error in token processing by LFS. This error allows attackers to gain unauthorized access to protected information and write arbitrary files.	12 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.	12 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the RefMatcher component in the Git-based software platform for collaborative code development on GitLab allows a hacker to trigger a service failure.	12 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of a Git-based software platform for collaborative code development on GitLab allows a perpetrator to influence the integrity of the protected information.	12 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.	12 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to bypassing authentication, allows a perpetrator to circumvent security restrictions.	12 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.	19 Aug 202400:00	–	bdu_fstec