Summary
Security updates have been released that address 6 vulnerabilities, including one with a severity of “high,” in GitLab Community Edition (CE) and Enterprise Edition (EE).
Risk
Estimate of the impact of the vulnerability on the reference community: HIGH/ORANGE (68.84/100)1.
Type
- Arbitrary Code Execution
Affected products and/or versions
GitLab Community Edition (CE) and Enterprise Edition (EE)
Mitigation actions
In line with vendor statements, it is recommended to update GitLab products to the latest available version.
References
https://about.gitlab.com/releases/2024/07/24/patch-release-gitlab-17-2-1-released
1This estimate is made taking into account several parameters, including: CVSS, availability of patches/workarounds and PoC, diffusion of the affected software/devices in the reference community.