Gitlab

GitLab

1271 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2023-3920

  • EPSS 0.32%
  • Veröffentlicht 29.09.2023 07:15:13
  • Zuletzt bearbeitet 05.05.2025 14:14:55

An issue has been discovered in GitLab affecting all versions starting from 11.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible that a maintainer to create a fork relations...

4.3

CVE-2023-3979

  • EPSS 0.06%
  • Veröffentlicht 29.09.2023 07:15:13
  • Zuletzt bearbeitet 21.11.2024 08:18:27

An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible that upstream members to collaborate with yo...

5.7

CVE-2023-0989

  • EPSS 0.07%
  • Veröffentlicht 29.09.2023 07:15:12
  • Zuletzt bearbeitet 21.11.2024 07:38:14

An information disclosure issue in GitLab CE/EE affecting all versions starting from 13.11 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows an attacker to extract non-protected CI/CD variables by tricking a user to visit a fork ...

4.3

CVE-2023-2233

  • EPSS 0.04%
  • Veröffentlicht 29.09.2023 07:15:12
  • Zuletzt bearbeitet 21.11.2024 07:58:12

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.2.8, all versions starting from 16.3 before 16.3.5 and all versions starting from 16.4 before 16.4.1. It allows a project reporter...

9.8

CVE-2023-5009

  • EPSS 0.03%
  • Veröffentlicht 19.09.2023 08:16:07
  • Zuletzt bearbeitet 21.11.2024 08:40:52

An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan p...

4.3

CVE-2023-4630

  • EPSS 0.13%
  • Veröffentlicht 11.09.2023 14:15:09
  • Zuletzt bearbeitet 21.11.2024 08:35:34

An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 in which any user can read limited information about any proj...

5.3

CVE-2023-4018

  • EPSS 0.09%
  • Veröffentlicht 01.09.2023 11:15:43
  • Zuletzt bearbeitet 21.11.2024 08:34:14

An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. Due to improper permission validation it was possible to create model experiments in public projects.

4.3

CVE-2023-4378

  • EPSS 0.11%
  • Veröffentlicht 01.09.2023 11:15:43
  • Zuletzt bearbeitet 21.11.2024 08:34:57

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. A malicious Maintainer can, under specific circumstanc...

7.5

CVE-2023-4647

  • EPSS 0.22%
  • Veröffentlicht 01.09.2023 11:15:43
  • Zuletzt bearbeitet 05.05.2025 14:12:17

An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 in which the projects API pagination can be skipped, potentia...

6.5

CVE-2023-3210

  • EPSS 0.41%
  • Veröffentlicht 01.09.2023 11:15:42
  • Zuletzt bearbeitet 05.05.2025 14:14:12

An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service whe...