# GitLab.

Every CVE that names GitLab among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Inefficient Regular Expression Complexity in GitLab](https://agentprime.io/advisories/CVE-2023-3210.md)
  `CVE-2023-3210` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2023 · Tags: Denial of service
- [Cleartext Storage of Sensitive Information in GitLab](https://agentprime.io/advisories/CVE-2023-3950.md)
  `CVE-2023-3950` · CVE record: GitLab GitLab · CVSS 5.5 Medium · Not analysed yet · Published 1 Sept 2023 · Tags: Information disclosure
- [Direct Request ('Forced Browsing') in GitLab](https://agentprime.io/advisories/CVE-2023-4018.md)
  `CVE-2023-4018` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 1 Sept 2023 · Tags: Broken access control
- [Insertion of Sensitive Information Into Sent Data in GitLab](https://agentprime.io/advisories/CVE-2023-4378.md)
  `CVE-2023-4378` · CVE record: GitLab GitLab · CVSS 5.5 Medium · Not analysed yet · Published 1 Sept 2023 · Tags: Information disclosure
- [Allocation of Resources Without Limits or Throttling in GitLab](https://agentprime.io/advisories/CVE-2023-4647.md)
  `CVE-2023-4647` · CVE record: GitLab GitLab · CVSS 5.3 Medium · Not analysed yet · Published 1 Sept 2023 · Tags: Denial of service
- [Exposure of Sensitive Information to an Unauthorized Actor in GitLab](https://agentprime.io/advisories/CVE-2022-4343.md)
  `CVE-2022-4343` · CVE record: GitLab GitLab · CVSS 5.0 Medium · Not analysed yet · Published 1 Sept 2023 · Tags: Information disclosure
- [Incorrect Authorization in GitLab](https://agentprime.io/advisories/CVE-2023-0120.md)
  `CVE-2023-0120` · CVE record: GitLab GitLab · CVSS 3.5 Low · Not analysed yet · Published 1 Sept 2023 · Tags: Broken access control
- [URL Redirection to Untrusted Site in GitLab](https://agentprime.io/advisories/CVE-2023-1279.md)
  `CVE-2023-1279` · CVE record: GitLab GitLab · CVSS 2.6 Low · Not analysed yet · Published 1 Sept 2023 · Tags: Open redirect
- [Missing Authorization in GitLab](https://agentprime.io/advisories/CVE-2023-1555.md)
  `CVE-2023-1555` · CVE record: GitLab GitLab · CVSS 2.7 Low · Not analysed yet · Published 1 Sept 2023 · Tags: CWE-262
- [Inefficient Regular Expression Complexity in GitLab](https://agentprime.io/advisories/CVE-2023-3205.md)
  `CVE-2023-3205` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2023 · Tags: Denial of service
- [Incorrect Execution-Assigned Permissions in GitLab](https://agentprime.io/advisories/CVE-2023-3915.md)
  `CVE-2023-3915` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2023 · Tags: CWE-279
- [Improper Validation of Specified Type of Input in GitLab](https://agentprime.io/advisories/CVE-2023-4522.md)
  `CVE-2023-4522` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 30 Aug 2023 · Tags: CWE-1287
- [Insertion of Sensitive Information Into Sent Data in GitLab](https://agentprime.io/advisories/CVE-2023-4002.md)
  `CVE-2023-4002` · CVE record: GitLab GitLab · CVSS 5.3 Medium · Not analysed yet · Published 4 Aug 2023 · Tags: Information disclosure
- [Incorrect Ownership Assignment in GitLab](https://agentprime.io/advisories/CVE-2023-4008.md)
  `CVE-2023-4008` · CVE record: GitLab GitLab · CVSS 5.3 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: CWE-708
- [Incorrect User Management in GitLab](https://agentprime.io/advisories/CVE-2023-3932.md)
  `CVE-2023-3932` · CVE record: GitLab GitLab · CVSS 8.2 High · Not analysed yet · Published 3 Aug 2023 · Tags: CWE-286
- [Missing Authorization in GitLab](https://agentprime.io/advisories/CVE-2023-2022.md)
  `CVE-2023-2022` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 2 Aug 2023 · Tags: CWE-262
- [Improper Control of Generation of Code ('Code Injection') in GitLab](https://agentprime.io/advisories/CVE-2023-3401.md)
  `CVE-2023-3401` · CVE record: GitLab GitLab · CVSS 4.8 Medium · Not analysed yet · Published 2 Aug 2023 · Tags: Code injection
- [Allocation of Resources Without Limits or Throttling in GitLab](https://agentprime.io/advisories/CVE-2023-4011.md)
  `CVE-2023-4011` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 2 Aug 2023 · Tags: Denial of service
- [Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab](https://agentprime.io/advisories/CVE-2023-3500.md)
  `CVE-2023-3500` · CVE record: GitLab GitLab · CVSS 4.8 Medium · Not analysed yet · Published 2 Aug 2023 · Tags: Cross-site scripting (XSS)
- [Improper Validation of Specified Type of Input in GitLab](https://agentprime.io/advisories/CVE-2023-3900.md)
  `CVE-2023-3900` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 2 Aug 2023 · Tags: CWE-1287
- [Insertion of Sensitive Information into Log File in GitLab](https://agentprime.io/advisories/CVE-2023-3993.md)
  `CVE-2023-3993` · CVE record: GitLab GitLab · CVSS 4.9 Medium · Not analysed yet · Published 2 Aug 2023 · Tags: Information disclosure
- [Inefficient Regular Expression Complexity in GitLab](https://agentprime.io/advisories/CVE-2023-3994.md)
  `CVE-2023-3994` · CVE record: GitLab GitLab · CVSS 7.5 High · Not analysed yet · Published 2 Aug 2023 · Tags: Denial of service
- [Inefficient Regular Expression Complexity in GitLab](https://agentprime.io/advisories/CVE-2023-0632.md)
  `CVE-2023-0632` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 1 Aug 2023 · Tags: Denial of service
- [Generation of Error Message Containing Sensitive Information in GitLab](https://agentprime.io/advisories/CVE-2023-1210.md)
  `CVE-2023-1210` · CVE record: GitLab GitLab · CVSS 3.1 Low · Not analysed yet · Published 1 Aug 2023 · Tags: Information disclosure
- [Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab](https://agentprime.io/advisories/CVE-2023-2164.md)
  `CVE-2023-2164` · CVE record: GitLab GitLab · CVSS 5.4 Medium · EPSS 0.66 · Not analysed yet · Published 1 Aug 2023 · Tags: Cross-site scripting (XSS)
- [Inefficient Regular Expression Complexity in GitLab](https://agentprime.io/advisories/CVE-2023-3364.md)
  `CVE-2023-3364` · CVE record: GitLab GitLab · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.44 · Not analysed yet · Published 1 Aug 2023 · Tags: Denial of service
- [Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab](https://agentprime.io/advisories/CVE-2023-3385.md)
  `CVE-2023-3385` · CVE record: GitLab GitLab · CVSS 6.3 Medium · Not analysed yet · Published 1 Aug 2023 · Tags: Path traversal
- [Insertion of Sensitive Information Into Sent Data in GitLab](https://agentprime.io/advisories/CVE-2023-1401.md)
  `CVE-2023-1401` · CVE record: GitLab GitLab · CVSS 5.0 Medium · Not analysed yet · Published 26 Jul 2023 · Tags: Information disclosure
- [Insertion of Sensitive Information Into Sent Data in GitLab](https://agentprime.io/advisories/CVE-2023-3102.md)
  `CVE-2023-3102` · CVE record: GitLab GitLab · CVSS 5.3 Medium · Not analysed yet · Published 21 Jul 2023 · Tags: Information disclosure
- [Incorrect Authorization in GitLab](https://agentprime.io/advisories/CVE-2023-3484.md)
  `CVE-2023-3484` · CVE record: GitLab GitLab · CVSS 8.0 High · Not analysed yet · Published 21 Jul 2023 · Tags: Broken access control
- [Insertion of Sensitive Information Into Sent Data in GitLab](https://agentprime.io/advisories/CVE-2023-2620.md)
  `CVE-2023-2620` · CVE record: GitLab GitLab · CVSS 5.5 Medium · Not analysed yet · Published 13 Jul 2023 · Tags: Information disclosure
- [Incorrect Authorization in GitLab](https://agentprime.io/advisories/CVE-2023-2576.md)
  `CVE-2023-2576` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 13 Jul 2023 · Tags: Broken access control
- [Generation of Error Message Containing Sensitive Information in GitLab](https://agentprime.io/advisories/CVE-2023-3362.md)
  `CVE-2023-3362` · CVE record: GitLab GitLab · CVSS 5.3 Medium · Not analysed yet · Published 13 Jul 2023 · Tags: Information disclosure
- [Insertion of Sensitive Information into Log File in GitLab](https://agentprime.io/advisories/CVE-2023-3363.md)
  `CVE-2023-3363` · CVE record: GitLab GitLab · CVSS 3.9 Low · Not analysed yet · Published 13 Jul 2023 · Tags: Information disclosure
- [Incorrect Authorization in GitLab](https://agentprime.io/advisories/CVE-2023-3444.md)
  `CVE-2023-3444` · CVE record: GitLab GitLab · CVSS 5.7 Medium · Not analysed yet · Published 13 Jul 2023 · Tags: Broken access control
- [Inefficient Regular Expression Complexity in GitLab](https://agentprime.io/advisories/CVE-2023-3424.md)
  `CVE-2023-3424` · CVE record: GitLab GitLab · CVSS 7.5 High · Not analysed yet · Published 13 Jul 2023 · Tags: Denial of service
- [Improper Encoding or Escaping of Output in GitLab](https://agentprime.io/advisories/CVE-2023-2200.md)
  `CVE-2023-2200` · CVE record: GitLab GitLab · CVSS 4.1 Medium · Not analysed yet · Published 13 Jul 2023 · Tags: CWE-116
- [Authorization Bypass Through User-Controlled Key in GitLab](https://agentprime.io/advisories/CVE-2023-2190.md)
  `CVE-2023-2190` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 13 Jul 2023 · Tags: Broken access control
- [Exposure of Private Personal Information to an Unauthorized Actor in GitLab](https://agentprime.io/advisories/CVE-2023-1936.md)
  `CVE-2023-1936` · CVE record: GitLab GitLab · CVSS 3.5 Low · Not analysed yet · Published 11 Jul 2023 · Tags: Information disclosure
- [GitLab: An issue has been discovered in GitLab affecting all versions starting from 15.10 before…](https://agentprime.io/advisories/CVE-2023-2232.md)
  `CVE-2023-2232` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 28 Jun 2023
- [GitLab: An issue has been discovered in GitLab affecting all versions starting from 15.7 before…](https://agentprime.io/advisories/CVE-2022-4143.md)
  `CVE-2022-4143` · CVE record: GitLab GitLab · CVSS 6.4 Medium · Not analysed yet · Published 28 Jun 2023
- [Origin validation error in GitLab](https://agentprime.io/advisories/CVE-2023-2589.md)
  `CVE-2023-2589` · CVE record: GitLab GitLab · CVSS 5.9 Medium · Not analysed yet · Published 7 Jun 2023 · Tags: CWE-346
- [Incorrect Privilege Assignment in GitLab](https://agentprime.io/advisories/CVE-2023-2485.md)
  `CVE-2023-2485` · CVE record: GitLab GitLab · CVSS 4.4 Medium · Not analysed yet · Published 7 Jun 2023 · Tags: Privilege escalation
- [Cross-site scripting in GitLab](https://agentprime.io/advisories/CVE-2023-2442.md)
  `CVE-2023-2442` · CVE record: GitLab GitLab · CVSS 8.7 High · Critical (CVSS 7+ and EPSS) · EPSS 0.96 · Not analysed yet · Published 7 Jun 2023 · Tags: Cross-site scripting (XSS)
- [Regular expression denial of service in GitLab](https://agentprime.io/advisories/CVE-2023-2199.md)
  `CVE-2023-2199` · CVE record: GitLab GitLab · CVSS 7.5 High · Not analysed yet · Published 7 Jun 2023 · Tags: Denial of service
- [Regular expression denial of service in GitLab](https://agentprime.io/advisories/CVE-2023-2198.md)
  `CVE-2023-2198` · CVE record: GitLab GitLab · CVSS 7.5 High · Not analysed yet · Published 7 Jun 2023 · Tags: Denial of service
- [Cross-site scripting in GitLab](https://agentprime.io/advisories/CVE-2023-2015.md)
  `CVE-2023-2015` · CVE record: GitLab GitLab · CVSS 4.4 Medium · Not analysed yet · Published 7 Jun 2023 · Tags: Cross-site scripting (XSS)
- [Clickjacking in GitLab](https://agentprime.io/advisories/CVE-2023-2013.md)
  `CVE-2023-2013` · CVE record: GitLab GitLab · CVSS 2.6 Low · Not analysed yet · Published 7 Jun 2023 · Tags: CWE-1021
- [Authentication bypass by spoofing in GitLab](https://agentprime.io/advisories/CVE-2023-2001.md)
  `CVE-2023-2001` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 7 Jun 2023 · Tags: Authentication bypass
- [Insertion of Sensitive Information Into Sent Data in GitLab](https://agentprime.io/advisories/CVE-2023-1825.md)
  `CVE-2023-1825` · CVE record: GitLab GitLab · CVSS 3.1 Low · Not analysed yet · Published 7 Jun 2023 · Tags: Information disclosure
- [Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in GitLab](https://agentprime.io/advisories/CVE-2023-0508.md)
  `CVE-2023-0508` · CVE record: GitLab GitLab · CVSS 3.1 Low · Not analysed yet · Published 7 Jun 2023 · Tags: Other injection
- [Allocation of Resources Without Limits or Throttling in GitLab](https://agentprime.io/advisories/CVE-2023-0121.md)
  `CVE-2023-0121` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 7 Jun 2023 · Tags: Denial of service
- [Regular expression denial of service in GitLab](https://agentprime.io/advisories/CVE-2023-2132.md)
  `CVE-2023-2132` · CVE record: GitLab GitLab · CVSS 7.5 High · Not analysed yet · Published 6 Jun 2023 · Tags: Denial of service
- [GitLab: An issue has been discovered in GitLab EE affecting all versions starting from 12.0…](https://agentprime.io/advisories/CVE-2023-1621.md)
  `CVE-2023-1621` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 6 Jun 2023
- [Allocation of Resources Without Limits or Throttling in GitLab](https://agentprime.io/advisories/CVE-2023-0921.md)
  `CVE-2023-0921` · CVE record: GitLab GitLab · CVSS 4.3 Medium · EPSS 0.84 · Not analysed yet · Published 6 Jun 2023 · Tags: Denial of service
- [Path traversal in GitLab](https://agentprime.io/advisories/CVE-2023-2825.md)
  `CVE-2023-2825` · CVE record: GitLab GitLab · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.72 · Not analysed yet · Published 26 May 2023 · Tags: Path traversal
- [GitLab: An issue has been discovered in GitLab affecting all versions before 15.9.8…](https://agentprime.io/advisories/CVE-2023-2181.md)
  `CVE-2023-2181` · CVE record: GitLab GitLab · CVSS 6.3 Medium · Not analysed yet · Published 12 May 2023
- [Incorrect permission assignment in GitLab](https://agentprime.io/advisories/CVE-2023-2478.md)
  `CVE-2023-2478` · CVE record: GitLab GitLab · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 May 2023 · Tags: Broken access control
- [GitLab: An issue has been discovered in GitLab EE affecting all versions starting from 15.10…](https://agentprime.io/advisories/CVE-2023-2182.md)
  `CVE-2023-2182` · CVE record: GitLab GitLab · CVSS 6.8 Medium · Not analysed yet · Published 3 May 2023
- [GitLab: An issue has been discovered in GitLab affecting all versions starting from 10.0 before…](https://agentprime.io/advisories/CVE-2023-2069.md)
  `CVE-2023-2069` · CVE record: GitLab GitLab · CVSS 6.4 Medium · Not analysed yet · Published 3 May 2023

Newest: <https://agentprime.io/advisories/technology/gitlab.md>
Older: <https://agentprime.io/advisories/technology/gitlab.md?cursor=WyIyMDIzLTA1LTAzVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMy0yMDY5Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=gitlab&cursor=WyIyMDIzLTA5LTExVDEzOjAxOjAyLjUxOTAwMFoiLCJDVkUtMjAyMy00NjMwIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/gitlab/?cursor=WyIyMDIzLTA5LTExVDEzOjAxOjAyLjUxOTAwMFoiLCJDVkUtMjAyMy00NjMwIl0>. Everything for agents: <https://agentprime.io/llms.txt>.