Gitlab

GitLab

1474 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2023-0805

  • EPSS 0.83%
  • Veröffentlicht 03.05.2023 22:15:16
  • Zuletzt bearbeitet 12.02.2025 16:15:34

An issue has been discovered in GitLab EE affecting all versions starting from 15.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. A malicious group member may continue to have access ...

4.3

CVE-2022-4376

  • EPSS 0.76%
  • Veröffentlicht 03.05.2023 22:15:15
  • Zuletzt bearbeitet 21.11.2024 07:35:09

An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Under certain conditions, an attacker may be able to map a private email of...

4.3

CVE-2023-2069

  • EPSS 0.81%
  • Veröffentlicht 03.05.2023 21:15:21
  • Zuletzt bearbeitet 21.11.2024 07:57:52

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions starting from 13.0 before 13.0.1. A user with the role of developer could use the import pro...

6.5

CVE-2023-1965

  • EPSS 0.43%
  • Veröffentlicht 03.05.2023 21:15:18
  • Zuletzt bearbeitet 21.11.2024 07:40:14

An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Lack of verification on RelayState parameter allowed ...

4.5

CVE-2023-1265

  • EPSS 0.78%
  • Veröffentlicht 03.05.2023 21:15:17
  • Zuletzt bearbeitet 21.11.2024 07:38:47

An issue has been discovered in GitLab affecting all versions starting from 11.9 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. The condition allows for a privileged attacker, under ce...

5.4

CVE-2023-1836

  • EPSS 0.75%
  • Veröffentlicht 03.05.2023 21:15:17
  • Zuletzt bearbeitet 21.11.2024 07:39:59

A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. When viewing an XML file in a reposit...

5.4

CVE-2023-0155

Exploit
  • EPSS 0.77%
  • Veröffentlicht 03.05.2023 21:15:16
  • Zuletzt bearbeitet 21.11.2024 07:36:39

An issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10.1. Open redirects was possible due to framing arbitrary content on any page allowing user controlled markdown

6.5

CVE-2023-0485

  • EPSS 0.96%
  • Veröffentlicht 03.05.2023 21:15:16
  • Zuletzt bearbeitet 21.11.2024 07:37:16

An issue has been discovered in GitLab affecting all versions starting from 13.11 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It was possible that a project member demoted to a user r...

4.3

CVE-2023-1204

  • EPSS 0.51%
  • Veröffentlicht 03.05.2023 21:15:16
  • Zuletzt bearbeitet 30.01.2025 16:15:28

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A user could use an unverified email as a public em...

5.4

CVE-2018-17537

  • EPSS 0.4%
  • Veröffentlicht 16.04.2023 00:15:07
  • Zuletzt bearbeitet 06.02.2025 17:15:09

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. blog-viewer has stored XSS during repository browsing, if package.json exists. .