Advisories · Technology

GitLab.

Every CVE that names GitLab among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-2497 CVE record

CVSS 8.5 High

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6…
- GitLab
Not analysed yet 5 Aug 2022
CVE-2022-2531 CVE record

CVSS 5.3 Medium

GitLab: An issue has been discovered in GitLab EE affecting all versions starting from 12.5…
- GitLab
Not analysed yet 5 Aug 2022
CVE-2022-1948 CVE record

CVSS 8.7 High

An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1.
- GitLab
Not analysed yet 28 Jul 2022
CVE-2022-0167 CVE record

CVSS 3.1 Low

GitLab: An issue has been discovered in GitLab affecting all versions starting from 14.0 before…
- GitLab
Not analysed yet 1 Jul 2022
CVE-2022-1954 CVE record

CVSS 4.3 Medium

GitLab: A Regular Expression Denial of Service vulnerability in GitLab CE/EE affecting all…
- GitLab
Not analysed yet 1 Jul 2022
CVE-2022-1963 CVE record

CVSS 5.3 Medium

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4…
- GitLab
Not analysed yet 1 Jul 2022
CVE-2022-2270 CVE record

CVSS 3.5 Low

GitLab: An issue has been discovered in GitLab affecting all versions starting from 12.4 before…
- GitLab
Not analysed yet 1 Jul 2022
CVE-2022-2229 CVE record

CVSS 7.5 High

GitLab: An improper authorization issue in GitLab CE/EE affecting all versions from 13.7 prior to…
- GitLab
Not analysed yet 1 Jul 2022
CVE-2022-2228 CVE record

CVSS 5.3 Medium

GitLab: Information exposure in GitLab EE affecting all versions from 12.0 prior to 14.10.5…
- GitLab
Not analysed yet 1 Jul 2022
CVE-2022-1999 CVE record

CVSS 3.1 Low

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 prior to…
- GitLab
Not analysed yet 1 Jul 2022
CVE-2022-1981 CVE record

CVSS 2.7 Low

GitLab: An issue has been discovered in GitLab EE affecting all versions starting from 12.2 prior…
- GitLab
Not analysed yet 1 Jul 2022
CVE-2022-1983 CVE record

CVSS 6.5 Medium

GitLab: Incorrect authorization in GitLab EE affecting all versions from 10.7 prior to 14.10.5…
- GitLab
Not analysed yet 1 Jul 2022
CVE-2022-2230 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

GitLab: A Stored Cross-Site Scripting vulnerability in the project settings page in GitLab CE/EE…
- GitLab
Not analysed yet 1 Jul 2022
CVE-2022-2227 CVE record

CVSS 3.1 Low

GitLab: Improper access control in the runner jobs API in GitLab CE/EE affecting all versions…
- GitLab
Not analysed yet 1 Jul 2022
CVE-2022-2243 CVE record

CVSS 5.0 Medium

GitLab: An access control vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to…
- GitLab
Not analysed yet 1 Jul 2022
CVE-2022-2235 CVE record

CVSS 8.7 High

GitLab: Insufficient sanitization in GitLab EE's external issue tracker affecting all versions…
- GitLab
Not analysed yet 1 Jul 2022
CVE-2022-2185 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

GitLab: A critical issue has been discovered in GitLab affecting all versions starting from 14.0…
- GitLab
Not analysed yet 1 Jul 2022
CVE-2022-2281 CVE record

CVSS 2.6 Low

GitLab: An information disclosure vulnerability in GitLab EE affecting all versions from 12.5…
- GitLab
Not analysed yet 1 Jul 2022
CVE-2022-2244 CVE record

CVSS 4.3 Medium

GitLab: An improper authorization vulnerability in GitLab EE/CE affecting all versions from 14.8…
- GitLab
Not analysed yet 1 Jul 2022
CVE-2022-2250 CVE record

CVSS 4.7 Medium

GitLab: An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to…
- GitLab
Not analysed yet 1 Jul 2022
CVE-2022-1680 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

GitLab: An account takeover issue has been discovered in GitLab EE affecting all versions…
- GitLab
Not analysed yet 6 Jun 2022
CVE-2022-1783 CVE record

CVSS 2.7 Low

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3…
- GitLab
Not analysed yet 6 Jun 2022
CVE-2022-1944 CVE record

CVSS 5.4 Medium

GitLab: When the feature is configured, improper authorization in the Interactive Web Terminal in…
- GitLab
Not analysed yet 6 Jun 2022
CVE-2022-1821 CVE record

CVSS 4.3 Medium

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8…
- GitLab
Not analysed yet 6 Jun 2022
CVE-2022-1936 CVE record

CVSS 6.5 Medium

GitLab: Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5…
- GitLab
Not analysed yet 6 Jun 2022
CVE-2022-1940 CVE record

CVSS 7.7 High

GitLab: A Stored Cross-Site Scripting vulnerability in Jira integration in GitLab EE affecting…
- GitLab
Not analysed yet 6 Jun 2022
CVE-2022-1935 CVE record

CVSS 6.5 Medium

GitLab: Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5…
- GitLab
Not analysed yet 6 Jun 2022
CVE-2022-1423 CVE record

CVSS 7.1 High

GitLab: Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all…
- GitLab
Not analysed yet 19 May 2022
CVE-2022-1413 CVE record

CVSS 5.4 Medium

GitLab: Missing input masking in GitLab CE/EE affecting all versions starting from 1.0.2 before…
- GitLab
Not analysed yet 19 May 2022
CVE-2022-1416 CVE record

CVSS 4.3 Medium

GitLab: Missing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all…
- GitLab
Not analysed yet 19 May 2022
CVE-2022-1124 CVE record

CVSS 4.3 Medium

GitLab: An improper authorization issue has been discovered in GitLab CE/EE affecting all…
- GitLab
Not analysed yet 11 May 2022
CVE-2022-1510 CVE record

CVSS 6.5 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 13.9 before…
- GitLab
Not analysed yet 11 May 2022
CVE-2022-1460 CVE record

CVSS 6.1 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 9.2 before…
- GitLab
Not analysed yet 11 May 2022
CVE-2022-1406 CVE record

CVSS 6.5 Medium

GitLab: Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to…
- GitLab
Not analysed yet 11 May 2022
CVE-2022-1428 CVE record

CVSS 4.3 Medium

GitLab: An issue has been discovered in GitLab affecting all versions before 14.8.6…
- GitLab
Not analysed yet 11 May 2022
CVE-2022-1426 CVE record

CVSS 2.0 Low

GitLab: An issue has been discovered in GitLab affecting all versions starting from 12.6 before…
- GitLab
Not analysed yet 11 May 2022
CVE-2022-1352 CVE record

CVSS 5.3 Medium

GitLab: Due to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all…
- GitLab
Not analysed yet 11 May 2022
CVE-2022-1433 CVE record

CVSS 2.6 Low

GitLab: An issue has been discovered in GitLab affecting all versions starting from 14.4 before…
- GitLab
Not analysed yet 11 May 2022
CVE-2022-1545 CVE record

CVSS 4.3 Medium

GitLab: It was possible to disclose details of confidential notes created via the API in Gitlab…
- GitLab
Not analysed yet 11 May 2022
CVE-2022-1417 CVE record

CVSS 4.3 Medium

GitLab: Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before…
- GitLab
Not analysed yet 10 May 2022
CVE-2022-1431 CVE record

CVSS 4.3 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 12.10 before…
- GitLab
Not analysed yet 10 May 2022
CVE-2022-0477 CVE record

CVSS 4.9 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 11.9 before…
- GitLab
Not analysed yet 25 Apr 2022
CVE-2022-1157 CVE record

CVSS 2.6 Low

GitLab: Missing sanitization of logged exception messages in all versions prior to 14.7.7…
- GitLab
Not analysed yet 11 Apr 2022
CVE-2022-1193 CVE record

CVSS 4.3 Medium

GitLab: Improper access control in GitLab CE/EE versions 10.7 prior to 14.7.7…
- GitLab
Not analysed yet 11 Apr 2022
CVE-2022-1190 CVE record

CVSS 8.7 HighCritical · CVSS 7+ and EPSS

GitLab: Improper handling of user input in GitLab CE/EE versions 8.3 prior to 14.7.7…
- GitLab
Not analysed yet 4 Apr 2022
CVE-2022-1175 CVE record

CVSS 8.7 HighCritical · CVSS 7+ and EPSS

GitLab: Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7…
- GitLab
Not analysed yet 4 Apr 2022
CVE-2022-1162 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

A hardcoded password was set for accounts registered using an OmniAuth provider (e.g.
- GitLab
Not analysed yet 4 Apr 2022
CVE-2022-1148 CVE record

CVSS 5.3 Medium

GitLab: Improper authorization in GitLab Pages included with GitLab CE/EE affecting all versions…
- GitLab
Not analysed yet 4 Apr 2022
CVE-2022-1111 CVE record

CVSS 2.4 Low

GitLab: A business logic error in Project Import in GitLab CE/EE versions 14.9 prior to 14.9.2…
- GitLab
Not analysed yet 4 Apr 2022
CVE-2022-1185 CVE record

CVSS 6.5 Medium

GitLab: A denial of service vulnerability when rendering RDoc files in GitLab CE/EE versions 10…
- GitLab
Not analysed yet 4 Apr 2022
CVE-2022-1120 CVE record

CVSS 4.8 Medium

GitLab: Missing filtering in an error message in GitLab CE/EE affecting all versions prior to…
- GitLab
Not analysed yet 4 Apr 2022
CVE-2022-1174 CVE record

CVSS 4.3 Medium

GitLab: A potential DoS vulnerability was discovered in Gitlab CE/EE versions 13.7 before 14.7.7…
- GitLab
Not analysed yet 4 Apr 2022
CVE-2022-1188 CVE record

CVSS 3.7 Low

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1…
- GitLab
Not analysed yet 4 Apr 2022
CVE-2022-1105 CVE record

CVSS 4.3 Medium

GitLab: An improper access control vulnerability in GitLab CE/EE affecting all versions from…
- GitLab
Not analysed yet 4 Apr 2022
CVE-2022-1099 CVE record

CVSS 4.3 Medium

GitLab: Adding a very large number of tags to a runner in GitLab CE/EE affecting all versions…
- GitLab
Not analysed yet 4 Apr 2022
CVE-2022-1100 CVE record

CVSS 4.3 Medium

GitLab: A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from…
- GitLab
Not analysed yet 4 Apr 2022
CVE-2022-1189 CVE record

CVSS 3.1 Low

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.2…
- GitLab
Not analysed yet 4 Apr 2022
CVE-2022-0740 CVE record

CVSS 3.1 Low

GitLab: Incorrect authorization in the Asana integration's branch restriction feature in all…
- GitLab
Not analysed yet 4 Apr 2022
CVE-2022-0741 CVE record

CVSS 5.8 Medium

GitLab: Improper input validation in all versions of GitLab CE/EE using sendmail to send emails…
- GitLab
Not analysed yet 1 Apr 2022
CVE-2022-0425 CVE record

CVSS 5.4 Medium

GitLab: A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of…
- GitLab
Not analysed yet 1 Apr 2022