Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
gitlab gitlab 14.10.0 vulnerabilities and exploits
(subscribe to this query)
356
VMScore
CVE-2022-1545
It was possible to disclose details of confidential notes created via the API in Gitlab CE/EE affecting all versions from 13.2 before 14.8.6, 14.9 before 14.9.4, and 14.10 before 14.10.1 if an unauthorised project member was tagged in the note.
Gitlab Gitlab 14.10.0
Gitlab Gitlab
312
VMScore
CVE-2022-1124
An improper authorization issue has been discovered in GitLab CE/EE affecting all versions before 14.8.6, all versions from 14.9.0 before 14.9.4, and 14.10.0, allowing Guest project members to access trace log of jobs when it is enabled
Gitlab Gitlab 14.10.0
Gitlab Gitlab
445
VMScore
CVE-2022-1352
Due to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all versions from 11.0 before 14.8.6, 14.9 before 14.9.4, and 14.10 before 14.10.1, an endpoint may reveal the issue title to a user who crafted an API call with the ID of the issue from a public p...
Gitlab Gitlab 14.10.0
Gitlab Gitlab
445
VMScore
CVE-2022-1413
Missing input masking in GitLab CE/EE affecting all versions starting from 1.0.2 prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and all versions from 14.10.0 prior to 14.10.1 causes potentially sensitive integration properties to be disclosed in the web interface
Gitlab Gitlab 14.10.0
Gitlab Gitlab
312
VMScore
CVE-2022-1416
Missing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all versions starting from 1.0.2 prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and all versions from 14.10.0 prior to 14.10.1 allows for rendering of attacker controlled HTML tags and C...
Gitlab Gitlab 14.10.0
Gitlab Gitlab
383
VMScore
CVE-2022-1426
An issue has been discovered in GitLab affecting all versions starting from 12.6 prior to 14.8.6, all versions starting from 14.9 prior to 14.9.4, all versions starting from 14.10 prior to 14.10.1. GitLab was not correctly authenticating a user that had some certain amount of inf...
Gitlab Gitlab 14.10.0
Gitlab Gitlab
445
VMScore
CVE-2022-1431
An issue has been discovered in GitLab affecting all versions starting from 12.10 prior to 14.8.6, all versions starting from 14.9 prior to 14.9.4, all versions starting from 14.10 prior to 14.10.1. GitLab was not correctly handling malicious requests to the PyPi API endpoint all...
Gitlab Gitlab 14.10.0
Gitlab Gitlab
383
VMScore
CVE-2022-1433
An issue has been discovered in GitLab affecting all versions starting from 14.4 prior to 14.8.6, all versions starting from 14.9 prior to 14.9.4, all versions starting from 14.10 prior to 14.10.1. Missing invalidation of Markdown caching causes potential payloads from a previous...
Gitlab Gitlab 14.10.0
Gitlab Gitlab
356
VMScore
CVE-2022-1460
An issue has been discovered in GitLab affecting all versions starting from 9.2 prior to 14.8.6, all versions starting from 14.9 prior to 14.9.4, all versions starting from 14.10 prior to 14.10.1. GitLab was not performing correct authorizations on scheduled pipelines allowing a ...
Gitlab Gitlab 14.10.0
Gitlab Gitlab
445
VMScore
CVE-2022-1510
An issue has been discovered in GitLab affecting all versions starting from 13.9 prior to 14.8.6, all versions starting from 14.9 prior to 14.9.4, all versions starting from 14.10 prior to 14.10.1. GitLab was not correctly handling malicious text in the CI Editor and CI Pipeline ...
Gitlab Gitlab 14.10.0
Gitlab Gitlab
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4654
CVE-2023-49606
encryption
NULL pointer dereference
CVE-2024-4439
CVE-2024-4649
race condition
CVE-2024-27202
CVE-2024-34566
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »