← All credits
Thanks [joaxcar](https://hackerone.com/joaxcar) for reporting this vulnerability through our HackerOne bug bounty program
107 vulnerability records and advisories credit this contributor.
CVE-2024-8647
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
CVE-2024-8179
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2024-8180
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2024-8648
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2024-7404
Improper Restriction of Rendered UI Layers or Frames in GitLab
CVE-2024-8312
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2024-8977
Server-Side Request Forgery (SSRF) in GitLab
CVE-2024-6530
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2024-4099
Improper Encoding or Escaping of Output in GitLab
CVE-2024-1736
Uncontrolled Resource Consumption in GitLab