Gitlab

GitLab

1474 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2023-6051

  • EPSS 0.63%
  • Veröffentlicht 15.12.2023 16:15:46
  • Zuletzt bearbeitet 21.11.2024 08:43:02

An issue has been discovered in GitLab CE/EE affecting all versions before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when source code or installation packag...

8.1

CVE-2023-6680

  • EPSS 0.38%
  • Veröffentlicht 15.12.2023 16:15:46
  • Zuletzt bearbeitet 21.11.2024 08:44:19

An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows an attacker to authenticate as another user given their public k...

4.3

CVE-2023-5061

  • EPSS 0.43%
  • Veröffentlicht 15.12.2023 16:15:45
  • Zuletzt bearbeitet 21.11.2024 08:40:59

An issue has been discovered in GitLab affecting all versions starting from 9.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. In certain situations, it may have been possible for develope...

3.5

CVE-2023-3511

  • EPSS 0.4%
  • Veröffentlicht 15.12.2023 16:15:43
  • Zuletzt bearbeitet 21.11.2024 08:17:25

An issue has been discovered in GitLab EE affecting all versions starting from 8.17 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. It was possible for auditor users to fork and submit merg...

7.5

CVE-2023-3904

  • EPSS 0.75%
  • Veröffentlicht 15.12.2023 16:15:43
  • Zuletzt bearbeitet 21.11.2024 08:18:19

An issue has been discovered in GitLab EE affecting all versions starting before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. It was possible to overflow the time spent on an issue that altered...

8.1

CVE-2023-5332

Exploit
  • EPSS 0.74%
  • Veröffentlicht 04.12.2023 07:15:07
  • Zuletzt bearbeitet 21.11.2024 08:41:33

Patch in third party library Consul requires 'enable-script-checks' to be set to False. This was required to enable a patch by the vendor. Without this setting the patch could be bypassed. This only affects GitLab-EE.

7.5

CVE-2023-5995

  • EPSS 0.56%
  • Veröffentlicht 01.12.2023 07:15:13
  • Zuletzt bearbeitet 21.11.2024 08:42:56

An issue has been discovered in GitLab EE affecting all versions starting from 16.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for an attacker to abuse the policy bot t...

5.4

CVE-2023-6033

  • EPSS 0.56%
  • Veröffentlicht 01.12.2023 07:15:13
  • Zuletzt bearbeitet 21.11.2024 08:43:00

Improper neutralization of input in Jira integration configuration in GitLab CE/EE, affecting all versions from 15.10 prior to 16.6.1, 16.5 prior to 16.5.3, and 16.4 prior to 16.4.3 allows attacker to execute javascript in victim's browser.

7.5

CVE-2023-5226

  • EPSS 0.55%
  • Veröffentlicht 01.12.2023 07:15:12
  • Zuletzt bearbeitet 21.11.2024 08:41:19

An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. Under certain circumstances, a malicious actor bypass prohibited branch checks ...

6.5

CVE-2023-4912

  • EPSS 0.58%
  • Veröffentlicht 01.12.2023 07:15:11
  • Zuletzt bearbeitet 21.11.2024 08:36:15

An issue has been discovered in GitLab EE affecting all versions starting from 10.5 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for an attacker to cause a client-side de...