Gitlab

Gitlab

1257 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2022-2882

  • EPSS 1.49%
  • Veröffentlicht 28.10.2022 15:15:15
  • Zuletzt bearbeitet 07.05.2025 16:15:20

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. A malicious maintainer could exfiltrate a GitHub integ...

4.9

CVE-2022-3018

  • EPSS 0.28%
  • Veröffentlicht 28.10.2022 15:15:15
  • Zuletzt bearbeitet 07.05.2025 15:15:54

An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 allows a project maintainer to access the Dat...

7.5

CVE-2022-3639

  • EPSS 0.19%
  • Veröffentlicht 21.10.2022 16:15:11
  • Zuletzt bearbeitet 07.05.2025 15:15:54

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 10.8 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. Improper data handling on branch creation could...

7.5

CVE-2022-3031

  • EPSS 0.1%
  • Veröffentlicht 17.10.2022 16:15:22
  • Zuletzt bearbeitet 13.05.2025 17:15:49

An issue has been discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. It may be possible for an attacker to guess a user's password by brute fo...

7.3

CVE-2022-3060

  • EPSS 0.39%
  • Veröffentlicht 17.10.2022 16:15:22
  • Zuletzt bearbeitet 13.05.2025 17:15:49

Improper control of a resource identifier in Error Tracking in GitLab CE/EE affecting all versions from 12.7 allows an authenticated attacker to generate content which could cause a victim to make unintended arbitrary requests

5.4

CVE-2022-3066

  • EPSS 0.17%
  • Veröffentlicht 17.10.2022 16:15:22
  • Zuletzt bearbeitet 13.05.2025 17:15:49

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. It was possible for an unauthorised user to create issues in...

6.5

CVE-2022-3067

  • EPSS 0.24%
  • Veröffentlicht 17.10.2022 16:15:22
  • Zuletzt bearbeitet 13.05.2025 16:15:20

An issue has been discovered in the Import functionality of GitLab CE/EE affecting all versions starting from 14.4 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. It was possible for an aut...

6.5

CVE-2022-3279

  • EPSS 0.71%
  • Veröffentlicht 17.10.2022 16:15:22
  • Zuletzt bearbeitet 13.05.2025 16:15:20

An unhandled exception in job log parsing in GitLab CE/EE affecting all versions prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an attacker to prevent access to job logs

7.5

CVE-2022-3283

Exploit
  • EPSS 0.54%
  • Veröffentlicht 17.10.2022 16:15:22
  • Zuletzt bearbeitet 13.05.2025 16:15:21

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 While cloning an issue with special crafted content...

5.3

CVE-2022-3286

  • EPSS 0.12%
  • Veröffentlicht 17.10.2022 16:15:22
  • Zuletzt bearbeitet 13.05.2025 16:15:21

Lack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows a group member to bypass IP restrictions when using a deploy token