Vulnerabilities fixed in Gitlab Enterprise Edition and Community Edition

🗓️ 11 Oct 2024 08:23:31Reported by NCSCType

GitLab fixed vulnerabilities in editions enabling denial of service or data access.

Reporter	Title	Published	Views	Family All 129
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to access control errors. This allows a malicious actor to execute continuous integration and continuous delivery processes on arbitrary branches of the software.	14 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to authentication errors, allows a hacker to execute continuous integration and continuous delivery processes on arbitrary branches of the program.	18 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to insufficient verification of incoming requests, allows a hacker to execute an SSRF attack.	18 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to errors in representing specified functions, allows a perpetrator to gain unauthorized access to protected information.	23 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to deficiencies in the authentication process, allows attackers to increase their privileges.	24 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from insufficient protection of sensitive data in the source code. This allows attackers to gain unauthorized access to protected information.	24 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.	25 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to insufficient validation of input data, allows a hacker to trigger a service failure.	31 Oct 202400:00	–	bdu_fstec
FreeBSD	Gitlab -- vulnerabilities	9 Oct 202400:00	–	freebsd
Circl	CVE-2024-5005	11 Oct 202412:24	–	circl