CVSS: 8.5EPSS: 3%CPEs: 3EXPL: 1CVE-2024-2434 – Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
https://notcve.org/view.php?id=CVE-2024-2434
25 Apr 2024 — An issue has been discovered in GitLab affecting all versions of GitLab CE/EE 16.9 prior to 16.9.6, 16.10 prior to 16.10.4, and 16.11 prior to 16.11.1 where path traversal could lead to DoS and restricted file read. Se descubrió un problema en GitLab que afecta a todas las versiones de GitLab CE/EE 16.9 anteriores a 16.9.6, 16.10 anteriores a 16.10.4 y 16.11 anteriores a 16.11.1, donde el path traversal podría provocar DoS y lectura restringida de archivos. • https://gitlab.com/gitlab-org/gitlab/-/issues/450303 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.8EPSS: 2%CPEs: 3EXPL: 1CVE-2024-2829 – Inefficient Regular Expression Complexity in GitLab
https://notcve.org/view.php?id=CVE-2024-2829
25 Apr 2024 — An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.5 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1. A crafted wildcard filter in FileFinder may lead to a denial of service. Se descubrió un problema en GitLab CE/EE que afecta a todas las versiones desde 12.5 anteriores a 16.9.6, todas las versiones desde 16.10 anteriores a 16.10.4, todas las versiones desde 16.11 anteriores a 16.11.1. Un filtro comodín manipul... • https://gitlab.com/gitlab-org/gitlab/-/issues/451456 • CWE-400: Uncontrolled Resource Consumption CWE-1333: Inefficient Regular Expression Complexity •
CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 1CVE-2023-4895 – Missing Authorization in GitLab
https://notcve.org/view.php?id=CVE-2023-4895
22 Feb 2024 — An issue has been discovered in GitLab EE affecting all versions starting from 12.0 to 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. This vulnerability allows for bypassing the 'group ip restriction' settings to access environment details of projects Se descubrió un problema en GitLab EE que afecta a todas las versiones desde 12.0 a 16.7.6, todas las versiones desde 16.8 anteriores a 16.8.3, todas las versiones desde 16.9 anteriores a 16.9.1. Esta vuln... • https://gitlab.com/gitlab-org/gitlab/-/issues/424766 • CWE-284: Improper Access Control CWE-862: Missing Authorization •