Advisories · Technology

GitLab.

Every CVE that names GitLab among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-3210 CVE record

CVSS 6.5 Medium

Inefficient Regular Expression Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 1 Sept 2023
CVE-2023-3950 CVE record

CVSS 5.5 Medium

Cleartext Storage of Sensitive Information in GitLab
- GitLab
- Information disclosure
Not analysed yet 1 Sept 2023
CVE-2023-4018 CVE record

CVSS 4.3 Medium

Direct Request ('Forced Browsing') in GitLab
- GitLab
- Broken access control
Not analysed yet 1 Sept 2023
CVE-2023-4378 CVE record

CVSS 5.5 Medium

Insertion of Sensitive Information Into Sent Data in GitLab
- GitLab
- Information disclosure
Not analysed yet 1 Sept 2023
CVE-2023-4647 CVE record

CVSS 5.3 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 1 Sept 2023
CVE-2022-4343 CVE record

CVSS 5.0 Medium

Exposure of Sensitive Information to an Unauthorized Actor in GitLab
- GitLab
- Information disclosure
Not analysed yet 1 Sept 2023
CVE-2023-0120 CVE record

CVSS 3.5 Low

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 1 Sept 2023
CVE-2023-1279 CVE record

CVSS 2.6 Low

URL Redirection to Untrusted Site in GitLab
- GitLab
- Open redirect
Not analysed yet 1 Sept 2023
CVE-2023-1555 CVE record

CVSS 2.7 Low

Missing Authorization in GitLab
- GitLab
- CWE-262
Not analysed yet 1 Sept 2023
CVE-2023-3205 CVE record

CVSS 6.5 Medium

Inefficient Regular Expression Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 1 Sept 2023
CVE-2023-3915 CVE record

CVSS 6.5 Medium

Incorrect Execution-Assigned Permissions in GitLab
- GitLab
- CWE-279
Not analysed yet 1 Sept 2023
CVE-2023-4522 CVE record

CVSS 4.3 Medium

Improper Validation of Specified Type of Input in GitLab
- GitLab
- CWE-1287
Not analysed yet 30 Aug 2023
CVE-2023-4002 CVE record

CVSS 5.3 Medium

Insertion of Sensitive Information Into Sent Data in GitLab
- GitLab
- Information disclosure
Not analysed yet 4 Aug 2023
CVE-2023-4008 CVE record

CVSS 5.3 Medium

Incorrect Ownership Assignment in GitLab
- GitLab
- CWE-708
Not analysed yet 3 Aug 2023
CVE-2023-3932 CVE record

CVSS 8.2 High

Incorrect User Management in GitLab
- GitLab
- CWE-286
Not analysed yet 3 Aug 2023
CVE-2023-2022 CVE record

CVSS 4.3 Medium

Missing Authorization in GitLab
- GitLab
- CWE-262
Not analysed yet 2 Aug 2023
CVE-2023-3401 CVE record

CVSS 4.8 Medium

Improper Control of Generation of Code ('Code Injection') in GitLab
- GitLab
- Code injection
Not analysed yet 2 Aug 2023
CVE-2023-4011 CVE record

CVSS 4.3 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 2 Aug 2023
CVE-2023-3500 CVE record

CVSS 4.8 Medium

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 2 Aug 2023
CVE-2023-3900 CVE record

CVSS 4.3 Medium

Improper Validation of Specified Type of Input in GitLab
- GitLab
- CWE-1287
Not analysed yet 2 Aug 2023
CVE-2023-3993 CVE record

CVSS 4.9 Medium

Insertion of Sensitive Information into Log File in GitLab
- GitLab
- Information disclosure
Not analysed yet 2 Aug 2023
CVE-2023-3994 CVE record

CVSS 7.5 High

Inefficient Regular Expression Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 2 Aug 2023
CVE-2023-0632 CVE record

CVSS 6.5 Medium

Inefficient Regular Expression Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 1 Aug 2023
CVE-2023-1210 CVE record

CVSS 3.1 Low

Generation of Error Message Containing Sensitive Information in GitLab
- GitLab
- Information disclosure
Not analysed yet 1 Aug 2023
CVE-2023-2164 CVE record

CVSS 5.4 Medium

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 1 Aug 2023
CVE-2023-3364 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Inefficient Regular Expression Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 1 Aug 2023
CVE-2023-3385 CVE record

CVSS 6.3 Medium

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
- GitLab
- Path traversal
Not analysed yet 1 Aug 2023
CVE-2023-1401 CVE record

CVSS 5.0 Medium

Insertion of Sensitive Information Into Sent Data in GitLab
- GitLab
- Information disclosure
Not analysed yet 26 Jul 2023
CVE-2023-3102 CVE record

CVSS 5.3 Medium

Insertion of Sensitive Information Into Sent Data in GitLab
- GitLab
- Information disclosure
Not analysed yet 21 Jul 2023
CVE-2023-3484 CVE record

CVSS 8.0 High

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 21 Jul 2023
CVE-2023-2620 CVE record

CVSS 5.5 Medium

Insertion of Sensitive Information Into Sent Data in GitLab
- GitLab
- Information disclosure
Not analysed yet 13 Jul 2023
CVE-2023-2576 CVE record

CVSS 4.3 Medium

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 13 Jul 2023
CVE-2023-3362 CVE record

CVSS 5.3 Medium

Generation of Error Message Containing Sensitive Information in GitLab
- GitLab
- Information disclosure
Not analysed yet 13 Jul 2023
CVE-2023-3363 CVE record

CVSS 3.9 Low

Insertion of Sensitive Information into Log File in GitLab
- GitLab
- Information disclosure
Not analysed yet 13 Jul 2023
CVE-2023-3444 CVE record

CVSS 5.7 Medium

Incorrect Authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 13 Jul 2023
CVE-2023-3424 CVE record

CVSS 7.5 High

Inefficient Regular Expression Complexity in GitLab
- GitLab
- Denial of service
Not analysed yet 13 Jul 2023
CVE-2023-2200 CVE record

CVSS 4.1 Medium

Improper Encoding or Escaping of Output in GitLab
- GitLab
- CWE-116
Not analysed yet 13 Jul 2023
CVE-2023-2190 CVE record

CVSS 6.5 Medium

Authorization Bypass Through User-Controlled Key in GitLab
- GitLab
- Broken access control
Not analysed yet 13 Jul 2023
CVE-2023-1936 CVE record

CVSS 3.5 Low

Exposure of Private Personal Information to an Unauthorized Actor in GitLab
- GitLab
- Information disclosure
Not analysed yet 11 Jul 2023
CVE-2023-2232 CVE record

CVSS 6.5 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 15.10 before…
- GitLab
Not analysed yet 28 Jun 2023
CVE-2022-4143 CVE record

CVSS 6.4 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 15.7 before…
- GitLab
Not analysed yet 28 Jun 2023
CVE-2023-2589 CVE record

CVSS 5.9 Medium

Origin validation error in GitLab
- GitLab
- CWE-346
Not analysed yet 7 Jun 2023
CVE-2023-2485 CVE record

CVSS 4.4 Medium

Incorrect Privilege Assignment in GitLab
- GitLab
- Privilege escalation
Not analysed yet 7 Jun 2023
CVE-2023-2442 CVE record

CVSS 8.7 HighCritical · CVSS 7+ and EPSS

Cross-site scripting in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 7 Jun 2023
CVE-2023-2199 CVE record

CVSS 7.5 High

Regular expression denial of service in GitLab
- GitLab
- Denial of service
Not analysed yet 7 Jun 2023
CVE-2023-2198 CVE record

CVSS 7.5 High

Regular expression denial of service in GitLab
- GitLab
- Denial of service
Not analysed yet 7 Jun 2023
CVE-2023-2015 CVE record

CVSS 4.4 Medium

Cross-site scripting in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 7 Jun 2023
CVE-2023-2013 CVE record

CVSS 2.6 Low

Clickjacking in GitLab
- GitLab
- CWE-1021
Not analysed yet 7 Jun 2023
CVE-2023-2001 CVE record

CVSS 4.3 Medium

Authentication bypass by spoofing in GitLab
- GitLab
- Authentication bypass
Not analysed yet 7 Jun 2023
CVE-2023-1825 CVE record

CVSS 3.1 Low

Insertion of Sensitive Information Into Sent Data in GitLab
- GitLab
- Information disclosure
Not analysed yet 7 Jun 2023
CVE-2023-0508 CVE record

CVSS 3.1 Low

Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in GitLab
- GitLab
- Other injection
Not analysed yet 7 Jun 2023
CVE-2023-0121 CVE record

CVSS 6.5 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 7 Jun 2023
CVE-2023-2132 CVE record

CVSS 7.5 High

Regular expression denial of service in GitLab
- GitLab
- Denial of service
Not analysed yet 6 Jun 2023
CVE-2023-1621 CVE record

CVSS 6.5 Medium

GitLab: An issue has been discovered in GitLab EE affecting all versions starting from 12.0…
- GitLab
Not analysed yet 6 Jun 2023
CVE-2023-0921 CVE record

CVSS 4.3 Medium

Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
Not analysed yet 6 Jun 2023
CVE-2023-2825 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Path traversal in GitLab
- GitLab
- Path traversal
Not analysed yet 26 May 2023
CVE-2023-2181 CVE record

CVSS 6.3 Medium

GitLab: An issue has been discovered in GitLab affecting all versions before 15.9.8…
- GitLab
Not analysed yet 12 May 2023
CVE-2023-2478 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Incorrect permission assignment in GitLab
- GitLab
- Broken access control
Not analysed yet 8 May 2023
CVE-2023-2182 CVE record

CVSS 6.8 Medium

GitLab: An issue has been discovered in GitLab EE affecting all versions starting from 15.10…
- GitLab
Not analysed yet 3 May 2023
CVE-2023-2069 CVE record

CVSS 6.4 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 10.0 before…
- GitLab
Not analysed yet 3 May 2023