Home

Some companies that have chosen us

Privacy Officer and Privacy Consultant
CDP Scheme according to ISO/IEC 17024:2012
European Privacy Auditor
ISDP©10003 Certification Scheme according to ISO/IEC 17065:2012
Auditor
According to standard UNI 11697:2017
Lead Auditor ISO/IEC 27001:2022
According to standard ISO/IEC 17024:2012
Data Protection Officer
According to standard ISO/IEC 17024:2012
Anti-Bribery Lead Auditor Expert
According to standard ISO/IEC 17024:2012
ICT Security Manager
According to standard UNI 11506:2017
IT Service Management (ITSM)
According to the ITIL Foundation
Ethical Hacker (CEH)
According to the EC-Council
Network Defender (CND)
According to the EC-Council
Computer Hacking Forensics Investigator (CHFI)
According to the EC-Council
Penetration Testing Professional (CPENT)
According to the EC-Council

Professional qualifications

Stay up-to-date with world news!

Select your topics of interest:
CYBER ALERT
Home / CYBER ALERT
/
Fixed vulnerabilities on GitLab CE/EE (AL02/240725/CSIRT-ITA)

Fixed vulnerabilities on GitLab CE/EE (AL02/240725/CSIRT-ITA)

Summary

Security updates have been released that address 6 vulnerabilities, including one with a severity of “high,” in GitLab Community Edition (CE) and Enterprise Edition (EE).

Risk

Estimate of the impact of the vulnerability on the reference community: HIGH/ORANGE (68.84/100)1.

Type

  • Arbitrary Code Execution

Affected products and/or versions

GitLab Community Edition (CE) and Enterprise Edition (EE)

Mitigation actions

In line with vendor statements, it is recommended to update GitLab products to the latest available version.

References

https://about.gitlab.com/releases/2024/07/24/patch-release-gitlab-17-2-1-released

1This estimate is made taking into account several parameters, including: CVSS, availability of patches/workarounds and PoC, diffusion of the affected software/devices in the reference community.

Recommended to you

Search in 365TRUST

Our services