Gitlab

GitLab

1271 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2022-0488

  • EPSS 0.15%
  • Veröffentlicht 28.03.2022 19:15:08
  • Zuletzt bearbeitet 21.11.2024 06:38:45

An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trigger a timeout on a page with markdown by using a specific amount of block-quotes.

6.5

CVE-2022-0549

Exploit
  • EPSS 0.13%
  • Veröffentlicht 28.03.2022 19:15:08
  • Zuletzt bearbeitet 21.11.2024 06:38:53

An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under certain conditions, GitLab REST API may allow unprivileged users to...

9.8

CVE-2022-0735

  • EPSS 57.39%
  • Veröffentlicht 28.03.2022 19:15:08
  • Zuletzt bearbeitet 21.11.2024 06:39:17

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. An unauthorised user was able to steal runner registr...

7.5

CVE-2022-0738

  • EPSS 0.19%
  • Veröffentlicht 28.03.2022 19:15:08
  • Zuletzt bearbeitet 21.11.2024 06:39:17

An issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. GitLab was leaking user passwords when adding mirrors with S...

8.8

CVE-2022-0751

  • EPSS 0.26%
  • Veröffentlicht 28.03.2022 19:15:08
  • Zuletzt bearbeitet 21.11.2024 06:39:19

Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to create Snippets with misleading content which could trick unsuspecting users into executing arbitrary commands

4.3

CVE-2021-39876

Exploit
  • EPSS 0.24%
  • Veröffentlicht 28.03.2022 19:15:07
  • Zuletzt bearbeitet 21.11.2024 06:20:26

In all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee discloses the members of private groups.

4.3

CVE-2021-39943

  • EPSS 0.24%
  • Veröffentlicht 09.02.2022 23:15:16
  • Zuletzt bearbeitet 21.11.2024 06:20:37

An authorization logic error in the External Status Check API in GitLab EE affecting all versions starting from 14.1 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allowed a user to update...

6.5

CVE-2022-0152

Exploit
  • EPSS 0.15%
  • Veröffentlicht 18.01.2022 17:15:10
  • Zuletzt bearbeitet 21.11.2024 06:38:00

An issue has been discovered in GitLab affecting all versions starting from 13.10 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was vulnerable to unauthorized access to some pa...

8

CVE-2022-0154

  • EPSS 0.13%
  • Veröffentlicht 18.01.2022 17:15:10
  • Zuletzt bearbeitet 21.11.2024 06:38:01

An issue has been discovered in GitLab affecting all versions starting from 7.7 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was vulnerable to a Cross-Site Request Forgery att...

6.5

CVE-2022-0172

  • EPSS 0.08%
  • Veröffentlicht 18.01.2022 17:15:10
  • Zuletzt bearbeitet 21.11.2024 06:38:04

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3. Under certain conditions it was possible to bypass the IP restriction for public projects through GraphQL allowing unauthorised users to read titles of issues, me...