Gitlab

GitLab

1474 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2024-0456

  • EPSS 0.49%
  • Veröffentlicht 26.01.2024 01:15:09
  • Zuletzt bearbeitet 21.11.2024 08:46:37

An authorization vulnerability exists in GitLab versions 14.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. An unauthorized attacker is able to assign arbitrary users to MRs that they created within the project

5.4

CVE-2023-5933

  • EPSS 0.68%
  • Veröffentlicht 26.01.2024 01:15:08
  • Zuletzt bearbeitet 21.11.2024 08:42:48

An issue has been discovered in GitLab CE/EE affecting all versions after 13.7 before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. Improper input sanitization of user name allows arbitrary API PUT requests.

9.9

CVE-2024-0402

  • EPSS 3.78%
  • Veröffentlicht 26.01.2024 01:15:08
  • Zuletzt bearbeitet 21.11.2024 08:46:30

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating...

5.3

CVE-2023-6955

  • EPSS 0.55%
  • Veröffentlicht 12.01.2024 14:15:49
  • Zuletzt bearbeitet 05.05.2025 14:11:28

A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6, 16.6 prior to 16.6.4 and 16.7 prior to 16.7.2. This condition allows an attacker to create a workspace in one group that is associ...

9.8

CVE-2023-7028

Warnung Exploit
  • EPSS 94.65%
  • Veröffentlicht 12.01.2024 14:15:49
  • Zuletzt bearbeitet 24.10.2025 14:46:31

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user accoun...

5.3

CVE-2023-4812

  • EPSS 0.51%
  • Veröffentlicht 12.01.2024 14:15:48
  • Zuletzt bearbeitet 21.11.2024 08:36:01

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2. The required CODEOWNERS approval could be bypassed by add...

8.8

CVE-2023-5356

  • EPSS 0.83%
  • Veröffentlicht 12.01.2024 14:15:48
  • Zuletzt bearbeitet 21.11.2024 08:41:36

Incorrect authorization checks in GitLab CE/EE from all versions starting from 8.13 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2, allows a user to abuse slack/mattermost integrations to e...

5.3

CVE-2023-2030

  • EPSS 0.38%
  • Veröffentlicht 12.01.2024 14:15:47
  • Zuletzt bearbeitet 20.03.2025 17:00:53

An issue has been discovered in GitLab CE/EE affecting all versions from 12.2 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which an attacker could potentially modify the metadata of signed commits.

8.8

CVE-2023-3907

  • EPSS 0.59%
  • Veröffentlicht 17.12.2023 23:15:43
  • Zuletzt bearbeitet 05.05.2025 14:14:48

A privilege escalation vulnerability in GitLab EE affecting all versions from 16.0 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows a project Maintainer to use a Project Access Token to escalate their role to Owner

5.7

CVE-2023-5512

  • EPSS 0.49%
  • Veröffentlicht 15.12.2023 16:15:46
  • Zuletzt bearbeitet 21.11.2024 08:41:54

An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML encoding i...