Advisories · Technology

GitLab.

Every CVE that names GitLab among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-39908 CVE record

CVSS 6.5 Medium

GitLab: In all versions of GitLab CE/EE starting from 0.8.0 before 14.2.6…
- GitLab
Not analysed yet 1 Apr 2022
CVE-2022-0373 CVE record

CVSS 4.3 Medium

GitLab: Improper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4…
- GitLab
Not analysed yet 1 Apr 2022
CVE-2022-0390 CVE record

CVSS 4.3 Medium

GitLab: Improper access control in Gitlab CE/EE versions 12.7 to 14.5.4, 14.6 to 14.6.4…
- GitLab
Not analysed yet 1 Apr 2022
CVE-2022-0489 CVE record

CVSS 3.5 Low

An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 .
- GitLab
Not analysed yet 1 Apr 2022
CVE-2021-4191 CVE record

CVSS 5.3 Medium

GitLab: An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5…
- GitLab
Not analysed yet 28 Mar 2022
CVE-2022-0283 CVE record

CVSS 4.7 Medium

An issue has been discovered affecting GitLab versions prior to 13.5.
- GitLab
Not analysed yet 28 Mar 2022
CVE-2022-0136 CVE record

CVSS 5.4 Medium

GitLab: A vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 to 14.6.4…
- GitLab
Not analysed yet 28 Mar 2022
CVE-2021-39876 CVE record

CVSS 4.3 Medium

GitLab: In all versions of GitLab CE/EE since version 11.3…
- GitLab
Not analysed yet 28 Mar 2022
CVE-2022-0488 CVE record

CVSS 3.5 Low

An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10.
- GitLab
Not analysed yet 28 Mar 2022
CVE-2022-0344 CVE record

CVSS 3.1 Low

GitLab: An issue has been discovered in GitLab affecting all versions starting from 10.0 before…
- GitLab
Not analysed yet 28 Mar 2022
CVE-2022-0249 CVE record

CVSS 3.1 Low

A vulnerability was discovered in GitLab starting with version 12.
- GitLab
Not analysed yet 28 Mar 2022
CVE-2022-0123 CVE record

CVSS 5.9 Medium

GitLab: An issue has been discovered affecting GitLab versions prior to 14.4.5…
- GitLab
Not analysed yet 28 Mar 2022
CVE-2022-0427 CVE record

CVSS 7.7 High

GitLab: Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab…
- GitLab
Not analysed yet 28 Mar 2022
CVE-2022-0738 CVE record

CVSS 4.2 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 14.6 before…
- GitLab
Not analysed yet 28 Mar 2022
CVE-2022-0751 CVE record

CVSS 6.5 Medium

GitLab: Inaccurate display of Snippet files containing special characters in all versions of…
- GitLab
Not analysed yet 28 Mar 2022
CVE-2022-0371 CVE record

CVSS 4.3 Medium

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4…
- GitLab
Not analysed yet 28 Mar 2022
CVE-2022-0549 CVE record

CVSS 6.5 Medium

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6…
- GitLab
Not analysed yet 28 Mar 2022
CVE-2022-0735 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10…
- GitLab
Not analysed yet 28 Mar 2022
CVE-2021-39943 CVE record

CVSS 4.3 Medium

GitLab: An authorization logic error in the External Status Check API in GitLab EE affecting all…
- GitLab
Not analysed yet 9 Feb 2022
CVE-2021-39892 CVE record

CVSS 4.3 Medium

GitLab: In all versions of GitLab CE/EE since version 12.0…
- GitLab
Not analysed yet 18 Jan 2022
CVE-2021-39942 CVE record

CVSS 4.3 Medium

GitLab: A denial of service vulnerability in GitLab CE/EE affecting all versions starting from…
- GitLab
Not analysed yet 18 Jan 2022
CVE-2021-39946 CVE record

CVSS 8.7 High

GitLab: Improper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6…
- GitLab
Not analysed yet 18 Jan 2022
CVE-2022-0090 CVE record

CVSS 6.5 Medium

GitLab: An issue has been discovered affecting GitLab versions prior to 14.4.5…
- GitLab
Not analysed yet 18 Jan 2022
CVE-2022-0093 CVE record

CVSS 3.5 Low

GitLab: An issue has been discovered affecting GitLab versions prior to 14.4.5…
- GitLab
Not analysed yet 18 Jan 2022
CVE-2022-0125 CVE record

CVSS 4.3 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 12.0 before…
- GitLab
Not analysed yet 18 Jan 2022
CVE-2022-0154 CVE record

CVSS 7.5 High

GitLab: An issue has been discovered in GitLab affecting all versions starting from 7.7 before…
- GitLab
Not analysed yet 18 Jan 2022
CVE-2022-0124 CVE record

CVSS 4.3 Medium

GitLab: An issue has been discovered affecting GitLab versions prior to 14.4.5…
- GitLab
Not analysed yet 18 Jan 2022
CVE-2022-0244 CVE record

CVSS 8.6 High

An issue has been discovered in GitLab CE/EE affecting all versions starting with 14.5.
- GitLab
Not analysed yet 18 Jan 2022
CVE-2022-0151 CVE record

CVSS 6.5 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 12.10 before…
- GitLab
Not analysed yet 18 Jan 2022
CVE-2022-0152 CVE record

CVSS 6.5 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 13.10 before…
- GitLab
Not analysed yet 18 Jan 2022
CVE-2021-39927 CVE record

CVSS 3.5 Low

GitLab: Server side request forgery protections in GitLab CE/EE versions between 8.4 and 14.4.4…
- GitLab
Not analysed yet 18 Jan 2022
CVE-2022-0172 CVE record

CVSS 5.3 Medium

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3.
- GitLab
Not analysed yet 18 Jan 2022
CVE-2021-39930 CVE record

CVSS 4.3 Medium

GitLab: Missing authorization in GitLab EE versions between 12.4 and 14.3.6…
- GitLab
Not analysed yet 13 Dec 2021
CVE-2021-39941 CVE record

CVSS 3.7 Low

GitLab: An information disclosure vulnerability in GitLab CE/EE versions 12.0 to 14.3.6…
- GitLab
Not analysed yet 13 Dec 2021
CVE-2021-39935 CVE record

CVSS 6.8 MediumCritical · KEVKEV

Server-side request forgery in GitLab
- GitLab
- Server-side request forgery (SSRF)
Not analysed yet 13 Dec 2021
CVE-2021-39932 CVE record

CVSS 4.3 Medium

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0…
- GitLab
Not analysed yet 13 Dec 2021
CVE-2021-39917 CVE record

CVSS 4.3 Medium

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9…
- GitLab
Not analysed yet 13 Dec 2021
CVE-2021-39934 CVE record

CVSS 4.3 Medium

GitLab: Improper access control allows any project member to retrieve the service desk email…
- GitLab
Not analysed yet 13 Dec 2021
CVE-2021-39916 CVE record

CVSS 4.3 Medium

GitLab: Lack of an access control check in the External Status Check feature allowed any…
- GitLab
Not analysed yet 13 Dec 2021
CVE-2021-39919 CVE record

CVSS 4.4 Medium

GitLab: In all versions of GitLab CE/EE starting version 14.0 before 14.3.6…
- GitLab
Not analysed yet 13 Dec 2021
CVE-2021-39915 CVE record

CVSS 5.3 Medium

GitLab: Improper access control in the GraphQL API in GitLab CE/EE affecting all versions…
- GitLab
Not analysed yet 13 Dec 2021
CVE-2021-39933 CVE record

CVSS 4.3 Medium

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10…
- GitLab
Not analysed yet 13 Dec 2021
CVE-2021-39938 CVE record

CVSS 3.1 Low

GitLab: A vulnerable regular expression pattern in GitLab CE/EE since version 8.15 before 14.3.6…
- GitLab
Not analysed yet 13 Dec 2021
CVE-2021-39937 CVE record

CVSS 5.9 Medium

GitLab: A collision in access memoization logic in all versions of GitLab CE/EE before 14.3.6…
- GitLab
Not analysed yet 13 Dec 2021
CVE-2021-39936 CVE record

CVSS 3.5 Low

GitLab: Improper access control in GitLab CE/EE affecting all versions starting from 10.7 before…
- GitLab
Not analysed yet 13 Dec 2021
CVE-2021-39931 CVE record

CVSS 3.1 Low

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11…
- GitLab
Not analysed yet 13 Dec 2021
CVE-2021-39945 CVE record

CVSS 2.7 Low

GitLab: Improper access control in the GitLab CE/EE API affecting all versions starting from 9.4…
- GitLab
Not analysed yet 13 Dec 2021
CVE-2021-39944 CVE record

CVSS 7.1 High

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0…
- GitLab
Not analysed yet 13 Dec 2021
CVE-2021-39940 CVE record

CVSS 4.3 Medium

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2…
- GitLab
Not analysed yet 13 Dec 2021
CVE-2021-39918 CVE record

CVSS 3.1 Low

GitLab: Incorrect Authorization in GitLab EE affecting all versions starting from 11.1 before…
- GitLab
Not analysed yet 13 Dec 2021
CVE-2021-39910 CVE record

CVSS 2.6 Low

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6…
- GitLab
Not analysed yet 13 Dec 2021
CVE-2021-22170 CVE record

CVSS 6.2 Medium

GitLab: Assuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to…
- GitLab
Not analysed yet 6 Dec 2021
CVE-2021-39890 CVE record

CVSS 3.1 Low

GitLab: It was possible to bypass 2FA for LDAP users and access some specific pages with Basic…
- GitLab
Not analysed yet 6 Dec 2021
CVE-2021-39898 CVE record

CVSS 3.7 Low

GitLab: In all versions of GitLab CE/EE since version 10.6…
- GitLab
Not analysed yet 4 Nov 2021
CVE-2021-39905 CVE record

CVSS 4.3 Medium

GitLab: An information disclosure vulnerability in the GitLab CE/EE API since version 8.9.6…
- GitLab
Not analysed yet 4 Nov 2021
CVE-2021-39911 CVE record

CVSS 1.7 Low

GitLab: An improper access control flaw in all versions of GitLab CE/EE starting from 13.9 before…
- GitLab
Not analysed yet 4 Nov 2021
CVE-2021-39907 CVE record

CVSS 5.3 Medium

A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7.
- GitLab
Not analysed yet 4 Nov 2021
CVE-2021-39904 CVE record

CVSS 4.3 Medium

GitLab: An Improper Access Control vulnerability in the GraphQL API in all versions of GitLab…
- GitLab
Not analysed yet 4 Nov 2021
CVE-2021-39895 CVE record

CVSS 6.0 Medium

GitLab: In all versions of GitLab CE/EE since version 8.0…
- GitLab
Not analysed yet 4 Nov 2021
CVE-2021-22260 CVE record

CVSS 7.7 High

GitLab: A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of…
- GitLab
Not analysed yet 4 Nov 2021