Gitlab

GitLab

1271 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2023-3949

  • EPSS 0.11%
  • Veröffentlicht 01.12.2023 07:15:08
  • Zuletzt bearbeitet 21.11.2024 08:18:23

An issue has been discovered in GitLab affecting all versions starting from 11.3 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for unauthorized users to view a public proj...

4.3

CVE-2023-3443

  • EPSS 0.06%
  • Veröffentlicht 01.12.2023 07:15:07
  • Zuletzt bearbeitet 21.11.2024 08:17:16

An issue has been discovered in GitLab affecting all versions starting from 12.1 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for a Guest user to add an emoji on confiden...

7.5

CVE-2023-4379

  • EPSS 0.01%
  • Veröffentlicht 09.11.2023 21:15:24
  • Zuletzt bearbeitet 21.11.2024 08:34:58

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Code owner approval was not removed from merge requests when the target branch was updated.

6.5

CVE-2023-4700

  • EPSS 0.01%
  • Veröffentlicht 06.11.2023 18:15:08
  • Zuletzt bearbeitet 21.11.2024 08:35:43

An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1, allowed a user to run jobs in protected environments, bypassing any required approvals.

4.3

CVE-2023-5963

  • EPSS 0.02%
  • Veröffentlicht 06.11.2023 13:15:10
  • Zuletzt bearbeitet 21.11.2024 08:42:52

An issue has been discovered in GitLab EE with Advanced Search affecting all versions from 13.9 to 16.3.6, 16.4 prior to 16.4.2 and 16.5 prior to 16.5.1 that could allow a denial of service in the Advanced Search function by chaining too many syntax ...

4.3

CVE-2023-3246

  • EPSS 0.05%
  • Veröffentlicht 06.11.2023 13:15:09
  • Zuletzt bearbeitet 05.05.2025 14:11:41

An issue has been discovered in GitLab EE/CE affecting all versions starting before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1 which allows an attackers to block Sidekiq job processor.

7.7

CVE-2023-3399

  • EPSS 0.03%
  • Veröffentlicht 06.11.2023 13:15:09
  • Zuletzt bearbeitet 21.11.2024 08:17:11

An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. It was possible for an unauthorised project or group memb...

6.5

CVE-2023-3909

  • EPSS 0.02%
  • Veröffentlicht 06.11.2023 13:15:09
  • Zuletzt bearbeitet 05.05.2025 14:11:38

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.3 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A Regular Expression Denial of Service was possible by...

6.5

CVE-2023-5825

  • EPSS 0.13%
  • Veröffentlicht 06.11.2023 11:15:09
  • Zuletzt bearbeitet 05.05.2025 14:11:43

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.2 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A low-privileged attacker can point a CI/CD Component ...

5.3

CVE-2023-5831

  • EPSS 0.08%
  • Veröffentlicht 06.11.2023 11:15:09
  • Zuletzt bearbeitet 21.11.2024 08:42:35

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, and all versions starting from 16.5.0 before 16.5.1 which have the `super_sidebar_logged_out` feature...