Advisories · Technology

GitLab.

Every CVE that names GitLab among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-1451 CVE record

CVSS 8.7 HighCritical · CVSS 7+ and EPSS

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 21 Feb 2024
CVE-2024-1525 CVE record

CVSS 5.3 Medium

Authentication Bypass Using an Alternate Path or Channel in GitLab
- GitLab
- Authentication bypass
Not analysed yet 21 Feb 2024
CVE-2024-0861 CVE record

CVSS 4.3 Medium

Direct Request ('Forced Browsing') in GitLab
- GitLab
- Broken access control
Not analysed yet 21 Feb 2024
CVE-2023-3509 CVE record

CVSS 3.7 Low

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 21 Feb 2024
CVE-2024-1250 CVE record

CVSS 6.5 Medium

Privilege Chaining in GitLab
- GitLab
- Privilege escalation
Not analysed yet 12 Feb 2024
CVE-2023-6564 CVE record

CVSS 6.5 Medium

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 8 Feb 2024
CVE-2023-6736 CVE record

CVSS 6.5 Medium

Inefficient Regular Expression Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 7 Feb 2024
CVE-2023-6840 CVE record

CVSS 6.7 Medium

Missing Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 7 Feb 2024
CVE-2024-1066 CVE record

CVSS 6.5 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 7 Feb 2024
CVE-2023-5612 CVE record

CVSS 5.3 Medium

Missing Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 26 Jan 2024
CVE-2023-6159 CVE record

CVSS 6.5 Medium

Inefficient Regular Expression Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 26 Jan 2024
CVE-2023-5933 CVE record

CVSS 6.4 Medium

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 26 Jan 2024
CVE-2024-0456 CVE record

CVSS 4.3 Medium

Direct Request ('Forced Browsing') in GitLab
- GitLab
- Broken access control
Not analysed yet 26 Jan 2024
CVE-2024-0402 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
- GitLab
- Path traversal
Not analysed yet 26 Jan 2024
CVE-2023-2030 CVE record

CVSS 3.5 Low

Improper Verification of Cryptographic Signature in GitLab
- GitLab
- Weak cryptography or TLS
Not analysed yet 12 Jan 2024
CVE-2023-4812 CVE record

CVSS 7.6 High

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 12 Jan 2024
CVE-2023-5356 CVE record

CVSS 7.3 High

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 12 Jan 2024
CVE-2023-7028 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Weak Password Recovery Mechanism for Forgotten Password in GitLab
- GitLab
- CWE-640
Not analysed yet 12 Jan 2024
CVE-2023-6955 CVE record

CVSS 6.6 Medium

Missing Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 12 Jan 2024
CVE-2023-3907 CVE record

CVSS 4.9 Medium

Improper User Management in GitLab
- GitLab
- CWE-286
Not analysed yet 17 Dec 2023
CVE-2023-3904 CVE record

CVSS 4.3 Medium

Improper Validation of Specified Type of Input in GitLab
- GitLab
- CWE-1287
Not analysed yet 15 Dec 2023
CVE-2023-5061 CVE record

CVSS 4.3 Medium

Missing Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 15 Dec 2023
CVE-2023-5512 CVE record

CVSS 4.8 Medium

Improper Control of Generation of Code ('Code Injection') in GitLab
- GitLab
- Code injection
Not analysed yet 15 Dec 2023
CVE-2023-6051 CVE record

CVSS 5.7 Medium

Improper Control of Generation of Code ('Code Injection') in GitLab
- GitLab
- Code injection
Not analysed yet 15 Dec 2023
CVE-2023-6680 CVE record

CVSS 7.4 High

Improper Certificate Validation in GitLab
- GitLab
- Weak cryptography or TLS
Not analysed yet 15 Dec 2023
CVE-2023-3511 CVE record

CVSS 2.0 Low

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 15 Dec 2023
CVE-2023-5332 CVE record

CVSS 5.9 Medium

Dependency on Vulnerable Third-Party Component in GitLab
- GitLab
- CWE-1395
Not analysed yet 4 Dec 2023
CVE-2023-3443 CVE record

CVSS 3.1 Low

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 1 Dec 2023
CVE-2023-3964 CVE record

CVSS 4.3 Medium

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 1 Dec 2023
CVE-2023-3949 CVE record

CVSS 5.3 Medium

Insertion of Sensitive Information Into Sent Data in GitLab
- GitLab
- Information disclosure
Not analysed yet 1 Dec 2023
CVE-2023-4317 CVE record

CVSS 4.3 Medium

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 1 Dec 2023
CVE-2023-4658 CVE record

CVSS 3.1 Low

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 1 Dec 2023
CVE-2023-4912 CVE record

CVSS 2.6 Low

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 1 Dec 2023
CVE-2023-5226 CVE record

CVSS 4.8 Medium

Improper Control of Generation of Code ('Code Injection') in GitLab
- GitLab
- Code injection
Not analysed yet 1 Dec 2023
CVE-2023-6033 CVE record

CVSS 8.7 High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 1 Dec 2023
CVE-2023-5995 CVE record

CVSS 4.4 Medium

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 1 Dec 2023
CVE-2023-4379 CVE record

CVSS 8.1 High

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 9 Nov 2023
CVE-2023-4700 CVE record

CVSS 3.5 Low

Missing Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 6 Nov 2023
CVE-2023-5963 CVE record

CVSS 3.1 Low

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 6 Nov 2023
CVE-2023-3399 CVE record

CVSS 8.5 High

Insertion of Sensitive Information Into Sent Data in GitLab
- GitLab
- Information disclosure
Not analysed yet 6 Nov 2023
CVE-2023-3909 CVE record

CVSS 4.3 Medium

Inefficient Regular Expression Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 6 Nov 2023
CVE-2023-3246 CVE record

CVSS 4.3 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 6 Nov 2023
CVE-2023-5825 CVE record

CVSS 6.5 Medium

Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab
- GitLab
- Denial of service
Not analysed yet 6 Nov 2023
CVE-2023-5831 CVE record

CVSS 3.7 Low

Insertion of Sensitive Information Into Sent Data in GitLab
- GitLab
- Information disclosure
Not analysed yet 6 Nov 2023
CVE-2023-5106 CVE record

CVSS 8.2 High

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 2 Oct 2023
CVE-2023-5207 CVE record

CVSS 8.2 High

Execution with Unnecessary Privileges in GitLab
- GitLab
- Privilege escalation
Not analysed yet 30 Sept 2023
CVE-2023-3413 CVE record

CVSS 6.5 Medium

Insertion of Sensitive Information Into Sent Data in GitLab
- GitLab
- Information disclosure
Not analysed yet 29 Sept 2023
CVE-2023-3922 CVE record

CVSS 3.0 Low

URL Redirection to Untrusted Site ('Open Redirect') in GitLab
- GitLab
- Open redirect
Not analysed yet 29 Sept 2023
CVE-2023-5198 CVE record

CVSS 4.3 Medium

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 29 Sept 2023
CVE-2023-0989 CVE record

CVSS 4.3 Medium

Improper Ownership Management in GitLab
- GitLab
- CWE-282
Not analysed yet 29 Sept 2023
CVE-2023-2233 CVE record

CVSS 3.1 Low

Missing Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 29 Sept 2023
CVE-2023-3115 CVE record

CVSS 5.4 Medium

Incorrect User Management in GitLab
- GitLab
- CWE-286
Not analysed yet 29 Sept 2023
CVE-2023-3920 CVE record

CVSS 4.3 Medium

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 29 Sept 2023
CVE-2023-3917 CVE record

CVSS 4.3 Medium

Improper Validation of Specified Type of Input in GitLab
- GitLab
- CWE-1287
Not analysed yet 29 Sept 2023
CVE-2023-3914 CVE record

CVSS 5.4 Medium

Incorrect User Management in GitLab
- GitLab
- CWE-286
Not analysed yet 29 Sept 2023
CVE-2023-3906 CVE record

CVSS 3.5 Low

Improper Validation of Specified Type of Input in GitLab
- GitLab
- CWE-1287
Not analysed yet 29 Sept 2023
CVE-2023-3979 CVE record

CVSS 3.1 Low

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 29 Sept 2023
CVE-2023-4532 CVE record

CVSS 4.3 Medium

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 29 Sept 2023
CVE-2023-5009 CVE record

CVSS 8.2 High

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 19 Sept 2023
CVE-2023-4630 CVE record

CVSS 5.0 Medium

Missing Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 11 Sept 2023