GitLab CE and EE fix 5 vulnerabilities

Do you think this report is well-written? *

Yes

Do you use this technology? *

Yes

Was this report useful to you?

Yes

We would be happy if you would describe:

The security services provided by CESNET are designed to provide significant support in ensuring the cybersecurity of connected organizations. Although we strive to provide quality and reliable services, it is not possible to guarantee absolute coverage of all security vulnerabilities. Our services should be seen as a complement to an organization's own security management, not as a replacement. The client bears ultimate responsibility for securing their environment.

This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.

[TLP:CLEAR] GitLab CE and EE fix 5 vulnerabilities

GitLab is fixing 5 vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE) in versions 17.0.2, 16.11.4 and 16.10.7 [1].

GitLab - ReDoS (CVE-2024-1495)

CVSS 6.5 (Medium)

An authenticated remote attacker can carry out a ReDoS attack using a specially crafted file [1].

The vulnerability is present in product:

GitLab; >=13.1, <16.10.7; >=16.11, <16.11.4; >=17.0, <17.0.2;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

More information:

CVE-2024-1495 at cve.org, NVD
CWE-400 at cwe.mitre.org

The vulnerability was publicly disclosed 12. 6. 2024.

GitLab - ReDoS (CVE-2024-1736)

CVSS 6.5 (Medium)

An authenticated remote attacker can carry out a ReDoS attack using a specially crafted configuration file [1].

The vulnerability is present in product:

GitLab; <16.10.7; >=16.11, <16.11.4; >=17.0, <17.0.2;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

More information:

CVE-2024-1736 at cve.org, NVD
CWE-400 at cwe.mitre.org

The vulnerability was publicly disclosed 12. 6. 2024.

GitLab - ReDoS (CVE-2024-1963)

CVSS 6.5 (Medium)

An authenticated remote attacker can carry out a ReDoS attack by sending a specially crafted request [1].

The vulnerability is present in product:

GitLab; >=8.4, <16.10.7; >=16.11, <16.11.4; >=17.0, <17.0.2;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

More information:

CVE-2024-1963 at cve.org, NVD
CWE-400 at cwe.mitre.org

The vulnerability was publicly disclosed 12. 6. 2024.

GitLab - XSS (CVE-2024-4201)

CVSS 4.4 (Medium)

An authenticated remote attacker can carry out an XSS attack if the victim views, in "raw" mode, an XML file uploaded to the repository [1].

The vulnerability is present in product:

GitLab; >=5.1, <16.10.7; >=16.11, <16.11.4; >=17.0, <17.0.2;

CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N

More information:

CVE-2024-4201 at cve.org, NVD
CWE-79 at cwe.mitre.org

The vulnerability was publicly disclosed 12. 6. 2024.

GitLab - DoS (CVE-2024-5469)

CVSS 3.1 (Low)

An authenticated remote attacker can carry out a DoS attack on the service connecting GitLab with Kubernetes by sending specially crafted gRPC requests [1].

The vulnerability is present in product:

GitLab; >=16.10, <16.10.6; >=16.11, <16.11.3;

CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

More information:

CVE-2024-5469 at cve.org, NVD
CWE-400 at cwe.mitre.org

The vulnerability was publicly disclosed 12. 6. 2024.

Report feedback

[TLP:CLEAR] GitLab CE and EE fix 5 vulnerabilities

GitLab - ReDoS (CVE-2024-1495)

CVSS 6.5 (Medium)

GitLab - ReDoS (CVE-2024-1736)

CVSS 6.5 (Medium)

GitLab - ReDoS (CVE-2024-1963)

CVSS 6.5 (Medium)

GitLab - XSS (CVE-2024-4201)

CVSS 4.4 (Medium)

GitLab - DoS (CVE-2024-5469)

CVSS 3.1 (Low)

Links