Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
gitlab vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-3964
An issue has been discovered in GitLab affecting all versions starting from 13.2 prior to 16.4.3, all versions starting from 16.5 prior to 16.5.3, all versions starting from 16.6 prior to 16.6.1. It was possible for users to access composer packages on public projects that have p...
Gitlab Gitlab
Gitlab Gitlab 16.6.0
NA
CVE-2023-2233
An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 prior to 16.2.8, all versions starting from 16.3 prior to 16.3.5 and all versions starting from 16.4 prior to 16.4.1. It allows a project reporter to leak the owner'...
Gitlab Gitlab
Gitlab Gitlab 16.4.0
4
CVSSv2
CVE-2022-2228
Information exposure in GitLab EE affecting all versions from 12.0 before 14.10.5, 15.0 before 15.0.4, and 15.1 before 15.1.1 allows an attacker with the appropriate access tokens to obtain CI variables in a group with using IP-based access restrictions even if the GitLab Runner ...
Gitlab Gitlab 15.1.0
Gitlab Gitlab
NA
CVE-2023-4317
An issue has been discovered in GitLab affecting all versions starting from 9.2 prior to 16.4.3, all versions starting from 16.5 prior to 16.5.3, all versions starting from 16.6 prior to 16.6.1. It was possible for a user with the Developer role to update a pipeline schedule from...
Gitlab Gitlab
Gitlab Gitlab 16.6.0
NA
CVE-2022-4143
An issue has been discovered in GitLab affecting all versions starting from 15.7 prior to 15.8.5, from 15.9 prior to 15.9.4, and from 15.10 prior to 15.10.1 that allows for crafted, unapproved MRs to be introduced and merged without authorization
Gitlab Gitlab 15.10.0
Gitlab Gitlab
NA
CVE-2023-4895
An issue has been discovered in GitLab EE affecting all versions starting from 12.0 to 16.7.6, all versions starting from 16.8 prior to 16.8.3, all versions starting from 16.9 prior to 16.9.1. This vulnerability allows for bypassing the 'group ip restriction' settings t...
Gitlab Gitlab
Gitlab Gitlab 16.9.0
NA
CVE-2023-0450
An issue has been discovered in GitLab affecting all versions starting from 8.1 to 15.8.5, and from 15.9 to 15.9.4, and from 15.10 to 15.10.1. It was possible to add a branch with an ambiguous name that could be used to social engineer users.
Gitlab Gitlab 15.10.0
Gitlab Gitlab
NA
CVE-2023-0523
An issue has been discovered in GitLab affecting all versions starting from 15.6 prior to 15.8.5, 15.9 prior to 15.9.4, and 15.10 prior to 15.10.1. An XSS was possible via a malicious email address for certain instances.
Gitlab Gitlab 15.10.0
Gitlab Gitlab
5.5
CVSSv2
CVE-2021-39866
A business logic error in the project deletion process in GitLab 13.6 and later allows persistent access via project access tokens.
Gitlab Gitlab
Gitlab Gitlab 4.3.0
4.3
CVSSv2
CVE-2021-39869
In all versions of GitLab CE/EE since version 8.9, project exports may expose trigger tokens configured on that project.
Gitlab Gitlab
Gitlab Gitlab 4.3.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925
CVE-2023-41826
LFI
CVE-2022-22364
CVE-2024-2887
command injection
remote code execution
CVE-2024-34446
CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
5
6
7
8
9
10
NEXT »