Gitlab

Gitlab

1222 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2023-7045

Exploit
  • EPSS 0.1%
  • Published 23.05.2024 11:15:23
  • Last modified 16.12.2024 14:53:47

A CSRF vulnerability exists within GitLab CE/EE from versions 13.11 before 16.10.6, from 16.11 before 16.11.3, from 17.0 before 17.0.1. By leveraging this vulnerability, an attacker could exfiltrate anti-CSRF tokens via the Kubernetes Agent Server (K...

6.5

CVE-2024-1947

  • EPSS 0.15%
  • Published 23.05.2024 11:15:23
  • Last modified 13.12.2024 17:14:57

A denial of service (DoS) condition was discovered in GitLab CE/EE affecting all versions from 13.2.4 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1. By leveraging this vulnerability an attacker could create a DoS condition by sending c...

6.5

CVE-2023-6502

  • EPSS 0.29%
  • Published 23.05.2024 11:15:22
  • Last modified 16.12.2024 15:02:44

A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11 before 16.11.3, and 17.0 before 17.0.1. It is possible for an attacker to cause a denial of service using a crafted wiki page...

8.2

CVE-2024-4835

Exploit
  • EPSS 6.5%
  • Published 23.05.2024 07:15:09
  • Last modified 16.12.2024 15:10:13

A XSS condition exists within GitLab in versions 15.11 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1. By leveraging this condition, an attacker can craft a malicious page to exfiltrate sensitive user information.

6.5

CVE-2024-2874

Exploit
  • EPSS 0.12%
  • Published 23.05.2024 07:15:08
  • Last modified 16.12.2024 15:16:54

An issue has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11 before 16.11.3, and 17.0 before 17.0.1. A runner registered with a crafted description has the potential to disrupt the loading of targeted GitLab web r...

6.5

CVE-2024-4597

  • EPSS 0.02%
  • Published 14.05.2024 15:44:10
  • Last modified 13.12.2024 16:55:13

An issue has been discovered in GitLab EE affecting all versions from 16.7 before 16.9.7, all versions starting from 16.10 before 16.10.5, all versions starting from 16.11 before 16.11.2. An attacker could force a user with an active SAML session to ...

6.5

CVE-2024-4539

  • EPSS 0.15%
  • Published 14.05.2024 15:44:01
  • Last modified 13.12.2024 01:10:44

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 where abusing the API to filter branch and tags could lead to Denia...

6.5

CVE-2024-2651

  • EPSS 9.66%
  • Published 14.05.2024 15:20:14
  • Last modified 12.12.2024 22:00:20

An issue has been discovered in GitLab CE/EE affecting all versions before 16.9.7, all versions starting from 16.10 before 16.10.5, all versions starting from 16.11 before 16.11.2. It was possible for an attacker to cause a denial of service using ma...

6.5

CVE-2024-2454

  • EPSS 8.88%
  • Published 14.05.2024 15:19:23
  • Last modified 12.12.2024 16:38:08

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.11 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. The pins endpoint is susceptible to DoS through a crafted request...

6.5

CVE-2023-6688

  • EPSS 0.09%
  • Published 14.05.2024 14:35:33
  • Last modified 12.12.2024 16:22:38

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.11 prior to 16.11.2. A problem with the processing logic for Google Chat Messages integration may lead to a regular expression DoS attack on the server.