Advisories · Technology

GitLab.

Every CVE that names GitLab among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-1965 CVE record

CVSS 6.8 Medium

GitLab: An issue has been discovered in GitLab EE affecting all versions starting from 14.2…
- GitLab
Not analysed yet 3 May 2023
CVE-2023-1836 CVE record

CVSS 4.4 Medium

GitLab: A cross-site scripting issue has been discovered in GitLab affecting all versions…
- GitLab
Not analysed yet 3 May 2023
CVE-2023-1265 CVE record

CVSS 5.4 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 11.9 before…
- GitLab
Not analysed yet 3 May 2023
CVE-2023-1204 CVE record

CVSS 4.3 Medium

Improper signature verification in GitLab
- GitLab
- Weak cryptography or TLS
Not analysed yet 3 May 2023
CVE-2023-1178 CVE record

CVSS 5.7 Medium

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before…
- GitLab
Not analysed yet 3 May 2023
CVE-2023-0805 CVE record

CVSS 4.9 Medium

Missing authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 3 May 2023
CVE-2023-0756 CVE record

CVSS 4.8 Medium

GitLab: An issue has been discovered in GitLab affecting all versions before 15.9.6…
- GitLab
Not analysed yet 3 May 2023
CVE-2023-0485 CVE record

CVSS 6.5 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 13.11 before…
- GitLab
Not analysed yet 3 May 2023
CVE-2023-0155 CVE record

CVSS 5.4 Medium

An issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10.1.
- GitLab
Not analysed yet 3 May 2023
CVE-2022-4376 CVE record

CVSS 3.1 Low

GitLab: An issue has been discovered in GitLab affecting all versions before 15.9.6…
- GitLab
Not analysed yet 3 May 2023
CVE-2023-1787 CVE record

CVSS 4.3 Medium

Uncontrolled resource consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 5 Apr 2023
CVE-2023-1733 CVE record

CVSS 5.8 Medium

Uncontrolled resource consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 5 Apr 2023
CVE-2023-1710 CVE record

CVSS 5.3 Medium

Information disclosure in GitLab
- GitLab
- Information disclosure
Not analysed yet 5 Apr 2023
CVE-2023-1708 CVE record

CVSS 5.7 Medium

Code injection in GitLab
- GitLab
- Code injection
Not analysed yet 5 Apr 2023
CVE-2023-1417 CVE record

CVSS 4.3 Medium

Insecure direct object reference in GitLab
- GitLab
- Broken access control
Not analysed yet 5 Apr 2023
CVE-2023-1167 CVE record

CVSS 5.3 Medium

Improper authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 5 Apr 2023
CVE-2023-1098 CVE record

CVSS 5.8 Medium

GitLab: An information disclosure vulnerability has been discovered in GitLab EE/CE affecting all…
- GitLab
- CWE-535
Not analysed yet 5 Apr 2023
CVE-2023-1071 CVE record

CVSS 3.1 Low

Uncontrolled resource consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 5 Apr 2023
CVE-2023-0838 CVE record

CVSS 5.5 Medium

Information disclosure in GitLab
- GitLab
- Information disclosure
Not analysed yet 5 Apr 2023
CVE-2023-0523 CVE record

CVSS 5.4 Medium

Cross-site scripting in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 5 Apr 2023
CVE-2023-0450 CVE record

CVSS 3.7 Low

GitLab: An issue has been discovered in GitLab affecting all versions starting from 8.1 to…
- GitLab
Not analysed yet 5 Apr 2023
CVE-2023-0319 CVE record

CVSS 5.8 Medium

Improper access control in GitLab
- GitLab
- Broken access control
Not analysed yet 5 Apr 2023
CVE-2022-3513 CVE record

CVSS 6.1 Medium

Cross-site scripting in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 5 Apr 2023
CVE-2022-3375 CVE record

CVSS 3.1 Low

GitLab: An issue has been discovered in GitLab affecting all versions starting from 11.10 before…
- GitLab
- CWE-535
Not analysed yet 5 Apr 2023
CVE-2023-1084 CVE record

CVSS 2.7 Low

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions before 15.7.8…
- GitLab
Not analysed yet 9 Mar 2023
CVE-2023-1072 CVE record

CVSS 4.3 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 9.0 before…
- GitLab
Not analysed yet 9 Mar 2023
CVE-2023-0483 CVE record

CVSS 5.5 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 12.1 before…
- GitLab
Not analysed yet 9 Mar 2023
CVE-2023-0223 CVE record

CVSS 5.3 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 15.5 before…
- GitLab
Not analysed yet 9 Mar 2023
CVE-2023-0050 CVE record

CVSS 8.7 HighCritical · CVSS 7+ and EPSS

GitLab: An issue has been discovered in GitLab affecting all versions starting from 13.7 before…
- GitLab
Not analysed yet 9 Mar 2023
CVE-2022-4462 CVE record

CVSS 5.0 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 12.8 before…
- GitLab
Not analysed yet 9 Mar 2023
CVE-2022-4331 CVE record

CVSS 5.7 Medium

Improper access control in GitLab
- GitLab
- Broken access control
Not analysed yet 9 Mar 2023
CVE-2022-4289 CVE record

CVSS 6.4 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 15.3 before…
- GitLab
Not analysed yet 9 Mar 2023
CVE-2022-3758 CVE record

CVSS 5.4 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 15.5 before…
- GitLab
Not analysed yet 9 Mar 2023
CVE-2022-3381 CVE record

CVSS 4.3 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 10.0 to…
- GitLab
Not analysed yet 9 Mar 2023
CVE-2022-4315 CVE record

CVSS 5.0 Medium

Incorrect authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 8 Mar 2023
CVE-2022-4007 CVE record

CVSS 5.4 Medium

GitLab: A issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to…
- GitLab
Not analysed yet 8 Mar 2023
CVE-2023-0518 CVE record

CVSS 4.3 Medium

Uncontrolled resource consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 13 Feb 2023
CVE-2022-4138 CVE record

CVSS 6.4 Medium

Cross-site request forgery in GitLab
- GitLab
- Cross-site request forgery (CSRF)
Not analysed yet 13 Feb 2023
CVE-2022-3759 CVE record

CVSS 4.3 Medium

Uncontrolled resource consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 13 Feb 2023
CVE-2022-3411 CVE record

CVSS 6.5 Medium

Uncontrolled resource consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 13 Feb 2023
CVE-2022-4335 CVE record

CVSS 4.3 Medium

Server-side request forgery in GitLab
- GitLab
- Server-side request forgery (SSRF)
Not analysed yet 27 Jan 2023
CVE-2022-4255 CVE record

CVSS 4.3 Medium

GitLab: An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6…
- GitLab
Not analysed yet 27 Jan 2023
CVE-2022-4205 CVE record

CVSS 6.3 Medium

Type confusion in GitLab
- GitLab
- Memory corruption
Not analysed yet 27 Jan 2023
CVE-2022-4201 CVE record

CVSS 3.5 Low

Server-side request forgery in GitLab
- GitLab
- Server-side request forgery (SSRF)
Not analysed yet 27 Jan 2023
CVE-2022-4092 CVE record

CVSS 5.7 Medium

Cross-site scripting in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 24 Jan 2023
CVE-2022-4054 CVE record

CVSS 5.5 Medium

Information disclosure in GitLab
- GitLab
- Information disclosure
Not analysed yet 24 Jan 2023
CVE-2022-3902 CVE record

CVSS 5.5 Medium

Sensitive information in log files in GitLab
- GitLab
- Information disclosure
Not analysed yet 24 Jan 2023
CVE-2022-3820 CVE record

CVSS 6.5 Medium

Authentication bypass by spoofing in GitLab
- GitLab
- Authentication bypass
Not analysed yet 24 Jan 2023
CVE-2022-3740 CVE record

CVSS 6.5 Medium

Improper authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 24 Jan 2023
CVE-2022-3572 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Cross-site scripting in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 24 Jan 2023
CVE-2022-3482 CVE record

CVSS 5.3 Medium

GitLab: An improper access control issue in GitLab CE/EE affecting all versions from 11.3 prior…
- GitLab
Not analysed yet 24 Jan 2023
CVE-2022-3478 CVE record

CVSS 4.3 Medium

Unrestricted file upload in GitLab
- GitLab
- Unrestricted file upload
Not analysed yet 24 Jan 2023
CVE-2022-2907 CVE record

CVSS 5.7 Medium

Information disclosure in GitLab
- GitLab
- Information disclosure
Not analysed yet 17 Jan 2023
CVE-2023-0042 CVE record

CVSS 6.1 Medium

Open redirect in GitLab
- GitLab
- Open redirect
Not analysed yet 12 Jan 2023
CVE-2022-4365 CVE record

CVSS 5.5 Medium

Incorrect permission assignment in GitLab
- GitLab
- Broken access control
Not analysed yet 12 Jan 2023
CVE-2022-4342 CVE record

CVSS 5.5 Medium

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.1…
- GitLab
Not analysed yet 12 Jan 2023
CVE-2022-4167 CVE record

CVSS 5.3 Medium

Incorrect authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 12 Jan 2023
CVE-2022-4131 CVE record

CVSS 4.3 Medium

Regular expression denial of service in GitLab
- GitLab
- Denial of service
Not analysed yet 12 Jan 2023
CVE-2022-4037 CVE record

CVSS 6.4 Medium

Race condition in GitLab
- GitLab
- Race condition
Not analysed yet 12 Jan 2023
CVE-2022-3870 CVE record

CVSS 5.3 Medium

Information disclosure in GitLab
- GitLab
- Information disclosure
Not analysed yet 12 Jan 2023