Gitlab

Gitlab

1257 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2023-5963

  • EPSS 0.02%
  • Veröffentlicht 06.11.2023 13:15:10
  • Zuletzt bearbeitet 21.11.2024 08:42:52

An issue has been discovered in GitLab EE with Advanced Search affecting all versions from 13.9 to 16.3.6, 16.4 prior to 16.4.2 and 16.5 prior to 16.5.1 that could allow a denial of service in the Advanced Search function by chaining too many syntax ...

4.3

CVE-2023-3246

  • EPSS 0.05%
  • Veröffentlicht 06.11.2023 13:15:09
  • Zuletzt bearbeitet 05.05.2025 14:11:41

An issue has been discovered in GitLab EE/CE affecting all versions starting before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1 which allows an attackers to block Sidekiq job processor.

7.7

CVE-2023-3399

  • EPSS 0.03%
  • Veröffentlicht 06.11.2023 13:15:09
  • Zuletzt bearbeitet 21.11.2024 08:17:11

An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. It was possible for an unauthorised project or group memb...

6.5

CVE-2023-3909

  • EPSS 0.02%
  • Veröffentlicht 06.11.2023 13:15:09
  • Zuletzt bearbeitet 05.05.2025 14:11:38

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.3 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A Regular Expression Denial of Service was possible by...

6.5

CVE-2023-5825

  • EPSS 0.13%
  • Veröffentlicht 06.11.2023 11:15:09
  • Zuletzt bearbeitet 05.05.2025 14:11:43

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.2 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A low-privileged attacker can point a CI/CD Component ...

5.3

CVE-2023-5831

  • EPSS 0.06%
  • Veröffentlicht 06.11.2023 11:15:09
  • Zuletzt bearbeitet 21.11.2024 08:42:35

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, and all versions starting from 16.5.0 before 16.5.1 which have the `super_sidebar_logged_out` feature...

7.5

CVE-2023-5106

  • EPSS 0.04%
  • Veröffentlicht 02.10.2023 12:15:09
  • Zuletzt bearbeitet 21.11.2024 08:41:04

An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0 prior to 16.4.1 that could allow an attacker to impersonate users in CI pipelines through direct tra...

8.8

CVE-2023-5207

  • EPSS 0.2%
  • Veröffentlicht 30.09.2023 09:15:14
  • Zuletzt bearbeitet 21.11.2024 08:41:18

A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. An authenticated attacker could perform arbitrary pipeline execution under the context of another...

7.5

CVE-2023-3413

  • EPSS 0.22%
  • Veröffentlicht 29.09.2023 09:15:10
  • Zuletzt bearbeitet 21.11.2024 08:17:12

An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible to read the source code of a project through...

7.1

CVE-2023-3922

  • EPSS 0.07%
  • Veröffentlicht 29.09.2023 08:15:09
  • Zuletzt bearbeitet 20.03.2025 16:59:56

An issue has been discovered in GitLab affecting all versions starting from 8.15 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible to hijack some links and buttons on the GitL...