Vulnerabilities fixed in GitLab Enterprise Edition and Community Edition

🗓️ 13 Sep 2024 08:44:24Reported by NCSCType

GitLab fixed vulnerabilities in Enterprise and Community Editions that could cause denial of service or privilege escalation.

Reporter	Title	Published	Views	Family All 241
FreeBSD	Gitlab -- vulnerabilities	11 Sep 202400:00	–	freebsd
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to bypassing authentication through spoofing, allows a perpetrator to execute arbitrary code.	16 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Group Member Handler component in the Git-based software platform, which is used for collaborative code development on GitLab, allows a malicious individual to gain unauthorized access to protected information.	2 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab allows a hacker to intercept a user’s account credentials.	3 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition, related to the lack of measures taken to clean up data at the management level, allows a violator to introduce commands into the system.	13 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from context switching errors related to privilege escalation. This allows attackers to increase their privileges and gain unauthorized access to protected information.	13 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the use of a regular expression c with inefficient computational complexity, allowing a hacker to trigger a service failure.	13 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition lies in insufficient validation of requests on the server side, allowing attackers to execute SSRF attacks.	13 Nov 202400:00	–	bdu_fstec
GithubExploit	Exploit for Authentication Bypass by Spoofing in Gitlab	21 May 202608:44	–	githubexploit
Circl	CVE-2024-2743	12 Sep 202419:48	–	circl