Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GitLab — Vulnerabilities & Security Advisories 1083

All 1083 CVE vulnerabilities found in GitLab, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting GitLab, organized by vendor, product, and Common Weakness Enumeration (CWE) classification tags. It collects a comprehensive history of disclosed issues, spanning the full period during which GitLab has been commercially available, including both open-source and self-managed enterprise editions. Readers can use this resource to track the vendor's published security advisories, understand the frequency and severity trends of specific weakness classes, and review the complete vulnerability timeline for the GitLab platform. The data presented helps security teams identify recurring patterns, such as memory corruption or authentication flaws, without requiring individual lookups of separate CVE records. By consolidating these records, the page provides a structured overview of the product’s security posture, facilitating risk assessment and comparative analysis against other systems.

Vendor: GitLab

CVE ID Title CVSS Severity Published
CVE-2025-1042 Files or Directories Accessible to External Parties in GitLab CWE-552 4.9 Medium 2025-02-12
CVE-2025-1072 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-02-07
CVE-2024-2878 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 7.5 High 2025-02-05
CVE-2024-3976 Missing Authorization in GitLab CWE-862 6.5 Medium 2025-02-05
CVE-2024-5528 Incomplete Comparison with Missing Factors in GitLab CWE-1023 3.5 Low 2025-02-05
CVE-2024-9631 Inefficient Algorithmic Complexity in GitLab CWE-407 7.5 High 2025-02-05
CVE-2024-6356 Incorrect User Management in GitLab CWE-286 4.4 Medium 2025-02-05
CVE-2024-1539 Missing Authorization in GitLab CWE-862 4.3 Medium 2025-02-05
CVE-2023-6386 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 6.5 Medium 2025-02-05
CVE-2023-6195 Server-Side Request Forgery (SSRF) in GitLab CWE-918 2.6 Low 2025-01-30
CVE-2024-1211 Cross-Site Request Forgery (CSRF) in GitLab CWE-352 6.4 Medium 2025-01-30
CVE-2025-0290 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab CWE-835 4.3 Medium 2025-01-28
CVE-2024-11931 Insufficient Granularity of Access Control in GitLab CWE-1220 6.4 Medium 2025-01-24
CVE-2025-0314 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 8.7 High 2025-01-24
CVE-2024-13041 Incorrect User Management in GitLab CWE-286 4.2 Medium 2025-01-09
CVE-2024-6324 Inefficient Algorithmic Complexity in GitLab CWE-407 4.3 Medium 2025-01-09
CVE-2024-12431 Missing Authorization in GitLab CWE-862 4.3 Medium 2025-01-08
CVE-2025-0194 Insertion of Sensitive Information into Externally-Accessible File or Directory in GitLab CWE-538 6.5 Medium 2025-01-08
CVE-2023-5117 Exposure of Sensitive Information Due to Incompatible Policies in GitLab CWE-213 3.7 Low 2024-12-25
CVE-2024-8116 Incorrect Authorization in GitLab CWE-863 5.3 Medium 2024-12-16
CVE-2024-8650 Incorrect Authorization in GitLab CWE-863 5.3 Medium 2024-12-16
CVE-2024-8179 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 5.4 Medium 2024-12-12
CVE-2024-8233 Inefficient Algorithmic Complexity in GitLab CWE-407 7.5 High 2024-12-12
CVE-2024-8647 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab CWE-22 5.4 Medium 2024-12-12
CVE-2024-9367 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 4.3 Medium 2024-12-12
CVE-2024-9387 URL Redirection to Untrusted Site ('Open Redirect') in GitLab CWE-601 6.4 Medium 2024-12-12
CVE-2024-10043 Incorrect Authorization in GitLab CWE-863 3.1 Low 2024-12-12
CVE-2024-11274 URL Redirection to Untrusted Site ('Open Redirect') in GitLab CWE-601 8.7 High 2024-12-12
CVE-2024-12570 Privilege Context Switching Error in GitLab CWE-270 6.7 Medium 2024-12-12
CVE-2024-12292 Insertion of Sensitive Information into Log File in GitLab CWE-532 4.0 Medium 2024-12-12

All 1083 known CVE vulnerabilities affecting GitLab with full Chinese analysis, references, and POCs where available.