NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in GitLab Enterprise Edition en Community Edition
view advisory published 2024-09-13
GitLab heeft kwetsbaarheden verholpen in Enterprise Edition (EE) en Community Edition (CE).
01
describes (16)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-6685US | medium4.3 | — | ||
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 17.1.7, 17.2 prior to 17.2.5, and 17.3 prior to 17.3.2, where group runners information… | ||||
| CVE-2024-4283US | medium6.1 | — | ||
An issue has been discovered in GitLab EE affecting all versions starting from 11.1 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under certain conditions an open redi… | ||||
| CVE-2024-8641US | high8.8 | — | ||
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2. It may have been p… | ||||
| CVE-2024-8311US | medium6.5 | — | ||
An issue was discovered with pipeline execution policies in GitLab EE affecting all versions from 17.2 prior to 17.2.5, 17.3 prior to 17.3.2 which allows authenticated users to byp… | ||||
| CVE-2024-6678US | high8.8 | Exploit | ||
An issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3 prior to 17.3.2, which… | ||||
| CVE-2024-4472US | medium5.5 | — | ||
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.5 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3 prior to 17.3.2, where… | ||||
| CVE-2024-8640US | high8.8 | — | ||
An issue has been discovered in GitLab EE affecting all versions starting from 16.11 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2. Due to incomplete in… | ||||
| CVE-2024-8635US | medium6.5 | — | ||
A server-side request forgery issue has been discovered in GitLab EE affecting all versions starting from 16.8 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17… | ||||
| CVE-2024-8631US | high7.2 | — | ||
A privilege escalation issue has been discovered in GitLab EE affecting all versions starting from 16.6 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2. A… | ||||
| CVE-2024-8124US | high7.5 | — | ||
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.1.7, starting from 17.2 prior to 17.2.5, starting from 17.3 prior to 17.3.2 which cou… | ||||
| CVE-2024-6446US | low3.5 | — | ||
An issue has been discovered in GitLab affecting all versions starting from 17.1 to 17.1.7, 17.2 prior to 17.2.5 and 17.3 prior to 17.3.2. A crafted URL could be used to trick a vi… | ||||
| CVE-2024-6389US | medium4.3 | — | ||
An issue was discovered in GitLab-CE/EE affecting all versions starting with 17.0 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. An attacker as a guest user was able to… | ||||
| CVE-2024-5435US | medium6.5 | — | ||
An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 15.10 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starti… | ||||
| CVE-2024-4660US | high7.5OT elevated | — | ||
An issue has been discovered in GitLab EE affecting all versions starting from 11.2 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 be… | ||||
| CVE-2024-4612US | medium6.1 | — | ||
An issue has been discovered in GitLab EE affecting all versions starting from 12.9 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under certain conditions an open redi… | ||||
| CVE-2024-2743US | critical9.1OT elevated | — | ||
An issue was discovered in GitLab-EE starting with version 13.3 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2 that would allow an attacker to modify an on-demand DAST s… | ||||
02
references
External citations — patches, advisories, analysis.
- Reference - certbundde; hkcertexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan