GitLab 17.6.0 Enterprise Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:gitlab:gitlab:17.6.0:*:*:*:enterprise:*:*:*
part: a version: 17.6.0 update: *
| Vendor | Gitlab (57573e99-56e6-5fad-895e-0ce7fffc5b90) |
|---|---|
| Product | Gitlab (5414fcda-a172-5f72-b6e4-b415a19d21eb) |
| Edition | * |
| Language | * |
| Software edition | enterprise |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:gitlab/gitlab-org/gitlab |
purl2cpe | 2026-06-01 10:14:46.352268 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8237 |
vulnerable | 2026-06-08 07:00:23.315441 |
Inefficient Algorithmic Complexity in GitLab
MEDIUM (6.5)
A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions prior to 12.6 prior to 17.4.5, 17.5 prior to 17.5.3, and 17.6 prior to 17.6.1. An attacker could cause a denial of service with a crafted cargo.toml file.
Published: 2024-11-26T18:31:00.676Z
Updated: 2024-11-26T18:42:11.715Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8177 |
vulnerable | 2026-06-08 07:00:22.919656 |
Inefficient Algorithmic Complexity in GitLab
MEDIUM (5.3)
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.6 prior to 17.4.5, starting from 17.5 prior to 17.5.3, starting from 17.6 prior to 17.6.1 which could cause Denial of Service via integrating a malicious harbor registry.
Published: 2024-11-26T18:31:05.665Z
Updated: 2024-11-26T18:41:50.602Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8114 |
vulnerable | 2026-06-08 07:00:22.278541 |
Missing Authorization in GitLab
HIGH (8.2)
An issue has been discovered in GitLab CE/EE affecting all versions from 8.12 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. This issue allows an attacker with access to a victim's Personal Access Token (PAT) to escalate privileges.
Published: 2024-11-26T18:31:10.674Z
Updated: 2024-11-30T04:55:53.512Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11828 |
vulnerable | 2026-06-08 06:23:50.467754 |
Inefficient Algorithmic Complexity in GitLab
MEDIUM (4.3)
A denial of service (DoS) condition was discovered in GitLab CE/EE affecting all versions from 13.2.4 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. By leveraging this vulnerability an attacker could create a DoS condition by sending crafted API calls. This was a regression of an earlier patch.
Published: 2024-11-26T18:41:19.280Z
Updated: 2024-11-26T19:53:40.674Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11669 |
vulnerable | 2026-06-08 06:23:50.174197 |
Incorrect Authorization in GitLab
MEDIUM (6.5)
An issue was discovered in GitLab CE/EE affecting all versions from 16.9.8 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Certain API endpoints could potentially allow unauthorized access to sensitive data due to overly broad application of token scopes.
Published: 2024-11-26T18:41:09.488Z
Updated: 2024-11-30T04:55:54.926Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11668 |
vulnerable | 2026-06-08 06:23:50.173272 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10383 |
vulnerable | 2026-06-08 06:23:46.391171 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.