Gitlab

Gitlab

1247 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2025-0605

  • EPSS 0.02%
  • Veröffentlicht 22.05.2025 14:31:54
  • Zuletzt bearbeitet 29.05.2025 15:58:07

An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Group access controls could allow certain users to bypass two-factor authentication requirements.

4.3

CVE-2025-0679

  • EPSS 0.01%
  • Veröffentlicht 22.05.2025 14:31:44
  • Zuletzt bearbeitet 29.05.2025 15:57:54

An issue has been discovered in GitLab CE/EE affecting all versions from 17.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Under certain conditions un-authorised users can view full email addresses that should be partially obscured.

6.5

CVE-2025-0993

  • EPSS 0.09%
  • Veröffentlicht 22.05.2025 14:31:34
  • Zuletzt bearbeitet 29.05.2025 15:58:42

An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. This could allow an authenticated attacker to cause a denial of service condition by exhausting server resources.

4.3

CVE-2025-1110

  • EPSS 0.01%
  • Veröffentlicht 22.05.2025 14:16:02
  • Zuletzt bearbeitet 29.05.2025 15:58:34

An issue has been discovered in GitLab CE/EE affecting all versions from 18.0 before 18.0.1. In certain circumstances, a user with limited permissions could access Job Data via a crafted GraphQL query.

6.5

CVE-2025-2853

  • EPSS 0.17%
  • Veröffentlicht 22.05.2025 13:30:48
  • Zuletzt bearbeitet 29.05.2025 15:58:28

An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A lack of proper validation in GitLab could allow an authenticated user to cause a denial of service condition.

6.5

CVE-2025-3111

  • EPSS 0.17%
  • Veröffentlicht 22.05.2025 13:30:43
  • Zuletzt bearbeitet 29.05.2025 15:58:19

An issue has been discovered in GitLab CE/EE affecting all versions from 10.2 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A lack of input validation in the Kubernetes integration could allow an authenticated user to cause denial of ...

7.5

CVE-2025-4979

  • EPSS 0.01%
  • Veröffentlicht 22.05.2025 13:30:28
  • Zuletzt bearbeitet 08.08.2025 18:33:20

An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. An attacker may be able to reveal masked or hidden CI variables (that they did not author) in the WebUI, by simply creat...

7.5

CVE-2024-8973

  • EPSS 0.06%
  • Veröffentlicht 09.05.2025 16:14:45
  • Zuletzt bearbeitet 08.08.2025 16:54:24

An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2. It was possible to cause a DoS condition via GitHub import requests using a maliciou...

6.8

CVE-2025-0549

Exploit
  • EPSS 0.01%
  • Veröffentlicht 09.05.2025 16:13:23
  • Zuletzt bearbeitet 08.08.2025 16:54:26

An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.3 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2. A security vulnerability allows attackers to bypass Device OAuth flow protections, e...

7.5

CVE-2025-1278

  • EPSS 0.02%
  • Veröffentlicht 09.05.2025 16:13:14
  • Zuletzt bearbeitet 08.08.2025 18:32:48

An issue has been discovered in GitLab CE/EE affecting all versions from 12.0 before 17.9.8, 17.10 before 17.10.6, and 17.11 before 17.11.2. Under certain conditions users could bypass IP access restrictions and view sensitive information.