Advisories · Technology

GitLab.

Every CVE that names GitLab among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-3613 CVE record

CVSS 5.8 Medium

Uncontrolled resource consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 12 Jan 2023
CVE-2022-3573 CVE record

CVSS 5.4 Medium

Cross-site scripting in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 12 Jan 2023
CVE-2022-3514 CVE record

CVSS 4.3 Medium

Regular expression denial of service in GitLab
- GitLab
- Denial of service
Not analysed yet 12 Jan 2023
CVE-2022-3819 CVE record

CVSS 3.5 Low

Incorrect authorization in GitLab
- GitLab
- Broken access control
Not analysed yet 9 Nov 2022
CVE-2022-3818 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 9 Nov 2022
CVE-2022-3793 CVE record

CVSS 4.3 Medium

GitLab: An improper authorization issue in GitLab CE/EE affecting all versions from 14.4 prior to…
- GitLab
Not analysed yet 9 Nov 2022
CVE-2022-3726 CVE record

CVSS 4.8 Medium

GitLab: Lack of sand-boxing of OpenAPI documents in GitLab CE/EE affecting all versions from 12.6…
- GitLab
Not analysed yet 9 Nov 2022
CVE-2022-3706 CVE record

CVSS 3.1 Low

GitLab: Improper authorization in GitLab CE/EE affecting all versions from 7.14 prior to 15.3.5…
- GitLab
Not analysed yet 9 Nov 2022
CVE-2022-3486 CVE record

CVSS 4.7 Medium

Open redirect in GitLab
- GitLab
- Open redirect
Not analysed yet 9 Nov 2022
CVE-2022-3483 CVE record

CVSS 5.5 Medium

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1…
- GitLab
Not analysed yet 9 Nov 2022
CVE-2022-3413 CVE record

CVSS 4.3 Medium

Insecure direct object reference in GitLab
- GitLab
- Broken access control
Not analysed yet 9 Nov 2022
CVE-2022-3285 CVE record

CVSS 5.3 Medium

GitLab: Bypass of healthcheck endpoint allow list affecting all versions from 12.0 prior to…
- GitLab
Not analysed yet 9 Nov 2022
CVE-2022-3280 CVE record

CVSS 3.5 Low

Open redirect in GitLab
- GitLab
- Open redirect
Not analysed yet 9 Nov 2022
CVE-2022-3265 CVE record

CVSS 7.3 HighCritical · CVSS 7+ and EPSS

Cross-site scripting in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 9 Nov 2022
CVE-2022-2761 CVE record

CVSS 4.3 Medium

GitLab: An information disclosure issue in GitLab CE/EE affecting all versions from 14.4 prior to…
- GitLab
Not analysed yet 9 Nov 2022
CVE-2022-2904 CVE record

CVSS 7.3 High

Cross-site scripting in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 2 Nov 2022
CVE-2022-3018 CVE record

CVSS 6.8 Medium

Sensitive information in log files in GitLab
- GitLab
- Information disclosure
Not analysed yet 28 Oct 2022
CVE-2022-2882 CVE record

CVSS 5.5 Medium

Resource exposure in GitLab
- GitLab
- Information disclosure
Not analysed yet 28 Oct 2022
CVE-2022-2826 CVE record

CVSS 2.7 Low

Cross-site scripting in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 28 Oct 2022
CVE-2022-3639 CVE record

CVSS 4.3 Medium

Uncontrolled resource consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 21 Oct 2022
CVE-2022-3351 CVE record

CVSS 4.3 Medium

GitLab: An issue has been discovered in GitLab EE affecting all versions starting from 13.7…
- GitLab
Not analysed yet 17 Oct 2022
CVE-2022-3331 CVE record

CVSS 3.5 Low

Insecure direct object reference in GitLab
- GitLab
- Broken access control
Not analysed yet 17 Oct 2022
CVE-2022-3330 CVE record

CVSS 4.3 Medium

GitLab: It was possible for a guest user to read a todo targeting an inaccessible note in Gitlab…
- GitLab
Not analysed yet 17 Oct 2022
CVE-2022-3325 CVE record

CVSS 2.7 Low

Improper access control in GitLab
- GitLab
- Broken access control
Not analysed yet 17 Oct 2022
CVE-2022-3293 CVE record

CVSS 3.5 Low

Sensitive information in log files in GitLab
- GitLab
- Information disclosure
Not analysed yet 17 Oct 2022
CVE-2022-3291 CVE record

CVSS 6.5 Medium

Deserialization of untrusted data in GitLab
- GitLab
- Insecure deserialization
Not analysed yet 17 Oct 2022
CVE-2022-3288 CVE record

CVSS 3.5 Low

GitLab: A branch/tag name confusion in GitLab CE/EE affecting all versions prior to 15.2.5…
- GitLab
- CWE-471
Not analysed yet 17 Oct 2022
CVE-2022-3286 CVE record

CVSS 5.3 Medium

Improper access control in GitLab
- GitLab
- Broken access control
Not analysed yet 17 Oct 2022
CVE-2022-3283 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 17 Oct 2022
CVE-2022-3279 CVE record

CVSS 2.7 Low

Improper handling of exceptional conditions in GitLab
- GitLab
- CWE-755
Not analysed yet 17 Oct 2022
CVE-2022-3067 CVE record

CVSS 6.5 Medium

Improper access control in GitLab
- GitLab
- Broken access control
Not analysed yet 17 Oct 2022
CVE-2022-3066 CVE record

CVSS 5.4 Medium

Improper access control in GitLab
- GitLab
- Broken access control
Not analysed yet 17 Oct 2022
CVE-2022-3060 CVE record

CVSS 7.3 High

Path traversal in GitLab
- GitLab
- Path traversal
Not analysed yet 17 Oct 2022
CVE-2022-3031 CVE record

CVSS 3.7 Low

Unlimited authentication attempts in GitLab
- GitLab
- Authentication bypass
Not analysed yet 17 Oct 2022
CVE-2022-3030 CVE record

CVSS 4.3 Medium

Improper access control in GitLab
- GitLab
- Broken access control
Not analysed yet 17 Oct 2022
CVE-2022-2992 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Injection in GitLab
- GitLab
- Other injection
Not analysed yet 17 Oct 2022
CVE-2022-2931 CVE record

CVSS 7.5 High

GitLab: A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions…
- GitLab
Not analysed yet 17 Oct 2022
CVE-2022-2908 CVE record

CVSS 4.3 Medium

Regular expression denial of service in GitLab
- GitLab
- Denial of service
Not analysed yet 17 Oct 2022
CVE-2022-2884 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

OS command injection in GitLab
- GitLab
- Command injection
Not analysed yet 17 Oct 2022
CVE-2022-2865 CVE record

CVSS 7.3 High

Cross-site scripting in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 17 Oct 2022
CVE-2022-2630 CVE record

CVSS 4.3 Medium

Improper access control in GitLab
- GitLab
- Broken access control
Not analysed yet 17 Oct 2022
CVE-2022-2592 CVE record

CVSS 6.5 Medium

GitLab: A lack of length validation in Snippet descriptions in GitLab CE/EE affecting all…
- GitLab
- CWE-1284
Not analysed yet 17 Oct 2022
CVE-2022-2533 CVE record

CVSS 6.5 Medium

Improper authentication in GitLab
- GitLab
- Authentication bypass
Not analysed yet 17 Oct 2022
CVE-2022-2527 CVE record

CVSS 7.3 High

Cross-site scripting in GitLab
- GitLab
- Cross-site scripting (XSS)
Not analysed yet 17 Oct 2022
CVE-2022-2455 CVE record

CVSS 6.5 Medium

Uncontrolled resource consumption in GitLab
- GitLab
- Denial of service
Not analysed yet 17 Oct 2022
CVE-2022-2428 CVE record

CVSS 6.4 Medium

GitLab: A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions…
- GitLab
Not analysed yet 17 Oct 2022
CVE-2022-2095 CVE record

CVSS 4.3 Medium

GitLab: An improper access control check in GitLab CE/EE affecting all versions starting from…
- GitLab
Not analysed yet 5 Aug 2022
CVE-2022-2459 CVE record

CVSS 2.7 Low

GitLab: An issue has been discovered in GitLab EE affecting all versions before 15.0.5…
- GitLab
Not analysed yet 5 Aug 2022
CVE-2022-2500 CVE record

CVSS 4.4 Medium

GitLab: A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions…
- GitLab
Not analysed yet 5 Aug 2022
CVE-2022-2501 CVE record

CVSS 5.9 Medium

GitLab: An improper access control issue in GitLab EE affecting all versions from 12.0 prior to…
- GitLab
Not analysed yet 5 Aug 2022
CVE-2022-2534 CVE record

CVSS 2.2 Low

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3…
- GitLab
Not analysed yet 5 Aug 2022
CVE-2022-2303 CVE record

CVSS 4.3 Medium

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5…
- GitLab
Not analysed yet 5 Aug 2022
CVE-2022-2326 CVE record

CVSS 6.4 Medium

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5…
- GitLab
Not analysed yet 5 Aug 2022
CVE-2022-2307 CVE record

CVSS 3.5 Low

GitLab: A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0…
- GitLab
Not analysed yet 5 Aug 2022
CVE-2022-2498 CVE record

CVSS 6.4 Medium

GitLab: An issue in pipeline subscriptions in GitLab EE affecting all versions from 12.8 prior to…
- GitLab
Not analysed yet 5 Aug 2022
CVE-2022-2456 CVE record

CVSS 4.9 Medium

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5…
- GitLab
Not analysed yet 5 Aug 2022
CVE-2022-2417 CVE record

CVSS 6.2 Medium

GitLab: Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to…
- GitLab
Not analysed yet 5 Aug 2022
CVE-2022-2539 CVE record

CVSS 5.3 Medium

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6…
- GitLab
Not analysed yet 5 Aug 2022
CVE-2022-2512 CVE record

CVSS 6.5 Medium

GitLab: An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0…
- GitLab
Not analysed yet 5 Aug 2022
CVE-2022-2499 CVE record

CVSS 3.5 Low

GitLab: An issue has been discovered in GitLab EE affecting all versions starting from 13.10…
- GitLab
Not analysed yet 5 Aug 2022