Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GitLab — Vulnerabilities & Security Advisories 1083

All 1083 CVE vulnerabilities found in GitLab, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting GitLab, organized by vendor, product, and Common Weakness Enumeration (CWE) classification tags. It collects a comprehensive history of disclosed issues, spanning the full period during which GitLab has been commercially available, including both open-source and self-managed enterprise editions. Readers can use this resource to track the vendor's published security advisories, understand the frequency and severity trends of specific weakness classes, and review the complete vulnerability timeline for the GitLab platform. The data presented helps security teams identify recurring patterns, such as memory corruption or authentication flaws, without requiring individual lookups of separate CVE records. By consolidating these records, the page provides a structured overview of the product’s security posture, facilitating risk assessment and comparative analysis against other systems.

Vendor: GitLab

CVE ID Title CVSS Severity Published
CVE-2024-8641 Privilege Context Switching Error in GitLab CWE-270 6.7 Medium 2024-09-12
CVE-2024-8631 Privilege Defined With Unsafe Actions in GitLab CWE-267 5.5 Medium 2024-09-12
CVE-2024-8754 External Control of Critical State Data in GitLab CWE-642 6.4 Medium 2024-09-12
CVE-2024-8635 Server-Side Request Forgery (SSRF) in GitLab CWE-918 7.7 High 2024-09-12
CVE-2024-2743 Incorrect Authorization in GitLab CWE-863 5.3 Medium 2024-09-12
CVE-2024-4612 URL Redirection to Untrusted Site ('Open Redirect') in GitLab CWE-601 6.4 Medium 2024-09-12
CVE-2024-4660 Missing Authorization in GitLab CWE-862 6.5 Medium 2024-09-12
CVE-2024-5435 Generation of Error Message Containing Sensitive Information in GitLab CWE-209 4.5 Medium 2024-09-12
CVE-2024-6446 Business Logic Errors in GitLab CWE-840 3.5 Low 2024-09-12
CVE-2024-6389 Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab CWE-497 4.3 Medium 2024-09-12
CVE-2024-8124 Inefficient Regular Expression Complexity in GitLab CWE-1333 7.5 High 2024-09-12
CVE-2024-8640 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab CWE-77 8.5 High 2024-09-12
CVE-2024-3127 Improper Access Control in GitLab CWE-284 4.3 Medium 2024-08-22
CVE-2024-6502 Incorrect Provision of Specified Functionality in GitLab CWE-684 5.7 Medium 2024-08-22
CVE-2024-7110 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab CWE-77 6.4 Medium 2024-08-22
CVE-2024-8041 Uncontrolled Resource Consumption in GitLab CWE-400 6.5 Medium 2024-08-22
CVE-2024-2800 Uncontrolled Resource Consumption in GitLab CWE-1333 6.5 Medium 2024-08-08
CVE-2024-3035 Authorization Bypass Through User-Controlled Key in GitLab CWE-639 6.8 Medium 2024-08-08
CVE-2024-3114 Uncontrolled Resource Consumption in GitLab CWE-1333 4.3 Medium 2024-08-08
CVE-2024-3958 Improper Control of Generation of Code ('Code Injection') in GitLab CWE-94 5.3 Medium 2024-08-08
CVE-2024-4207 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 4.4 Medium 2024-08-08
CVE-2024-5423 Uncontrolled Resource Consumption in GitLab CWE-400 6.5 Medium 2024-08-08
CVE-2024-7554 Exposure of Sensitive Information to an Unauthorized Actor in GitLab CWE-200 4.9 Medium 2024-08-08
CVE-2024-7610 Uncontrolled Resource Consumption in GitLab CWE-400 4.3 Medium 2024-08-08
CVE-2024-4210 Uncontrolled Resource Consumption in GitLab CWE-400 6.5 Medium 2024-08-08
CVE-2024-4784 Authentication Bypass by Primary Weakness in GitLab CWE-305 4.2 Medium 2024-08-08
CVE-2024-6329 Improper Encoding or Escaping of Output in GitLab CWE-116 5.7 Medium 2024-08-08
CVE-2024-7057 Improper Access Control in GitLab CWE-284 4.3 Medium 2024-07-25
CVE-2024-7047 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab CWE-79 7.7 High 2024-07-25
CVE-2024-0231 Improper Control of Resource Identifiers ('Resource Injection') in GitLab CWE-99 2.7 Low 2024-07-24

All 1083 known CVE vulnerabilities affecting GitLab with full Chinese analysis, references, and POCs where available.