GitLab Critical Security Release: 16.8.1, 16.7.4, 16.6.6, 16.5.8
Security advisory · GitLab patch releases
Assessment context
The vendor rates it critical
Weekly briefing
Week 4 · 22 Jan – 28 Jan 2024 UTC · assess the changes, then plan the next dates.
All dated changes in this period
4 source records · 4 groupsSecurityAtlassian Jira and Confluence
Atlassian Confluence Data Center and Server Template Injection Vulnerability
Atlassian · exploited, added to CISA KEV
CVE-2023-22527
Assessment context
CISA lists it as exploited, including by ransomware
SecurityiOS and iPadOS / macOS
Apple Multiple Products WebKit Type Confusion Vulnerability
Apple · exploited, added to CISA KEV
CVE-2024-23222
Assessment context
CISA lists it as exploited
SecurityVMware vCenter Server
VMware vCenter Server Out-of-Bounds Write Vulnerability
VMware · exploited, added to CISA KEV
CVE-2023-34048
Assessment context
CISA lists it as exploited
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.