Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
gitlab vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv3
CVE-2022-1406
Improper input validation in GitLab CE/EE affecting all versions from 8.12 before 14.8.6, all versions from 14.9.0 before 14.9.4, and 14.10.0 allows a Developer to read protected Group or Project CI/CD variables by importing a malicious project
Gitlab Gitlab 14.10.0
Gitlab Gitlab
5.4
CVSSv3
CVE-2022-1416
Missing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all versions starting from 1.0.2 prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and all versions from 14.10.0 prior to 14.10.1 allows for rendering of attacker controlled HTML tags and C...
Gitlab Gitlab 14.10.0
Gitlab Gitlab
8.8
CVSSv3
CVE-2022-1423
Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions starting from 1.0.2 prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and all versions from 14.10.0 prior to 14.10.1 allows a malicious actor with Developer privileges to perform ...
Gitlab Gitlab 14.10.0
Gitlab Gitlab
3.7
CVSSv3
CVE-2022-1426
An issue has been discovered in GitLab affecting all versions starting from 12.6 prior to 14.8.6, all versions starting from 14.9 prior to 14.9.4, all versions starting from 14.10 prior to 14.10.1. GitLab was not correctly authenticating a user that had some certain amount of inf...
Gitlab Gitlab 14.10.0
Gitlab Gitlab
6.1
CVSSv3
CVE-2022-1433
An issue has been discovered in GitLab affecting all versions starting from 14.4 prior to 14.8.6, all versions starting from 14.9 prior to 14.9.4, all versions starting from 14.10 prior to 14.10.1. Missing invalidation of Markdown caching causes potential payloads from a previous...
Gitlab Gitlab 14.10.0
Gitlab Gitlab
4.9
CVSSv3
CVE-2022-1460
An issue has been discovered in GitLab affecting all versions starting from 9.2 prior to 14.8.6, all versions starting from 14.9 prior to 14.9.4, all versions starting from 14.10 prior to 14.10.1. GitLab was not performing correct authorizations on scheduled pipelines allowing a ...
Gitlab Gitlab 14.10.0
Gitlab Gitlab
7.5
CVSSv3
CVE-2022-1510
An issue has been discovered in GitLab affecting all versions starting from 13.9 prior to 14.8.6, all versions starting from 14.9 prior to 14.9.4, all versions starting from 14.10 prior to 14.10.1. GitLab was not correctly handling malicious text in the CI Editor and CI Pipeline ...
Gitlab Gitlab 14.10.0
Gitlab Gitlab
4.3
CVSSv3
CVE-2022-1545
It was possible to disclose details of confidential notes created via the API in Gitlab CE/EE affecting all versions from 13.2 before 14.8.6, 14.9 before 14.9.4, and 14.10 before 14.10.1 if an unauthorised project member was tagged in the note.
Gitlab Gitlab 14.10.0
Gitlab Gitlab
8.8
CVSSv3
CVE-2022-1680
An account takeover issue has been discovered in GitLab EE affecting all versions starting from 11.10 prior to 14.9.5, all versions starting from 14.10 prior to 14.10.4, all versions starting from 15.0 prior to 15.0.1. When group SAML SSO is configured, the SCIM feature (availabl...
Gitlab Gitlab
Gitlab Gitlab 15.0.0
4.3
CVSSv3
CVE-2023-4317
An issue has been discovered in GitLab affecting all versions starting from 9.2 prior to 16.4.3, all versions starting from 16.5 prior to 16.5.3, all versions starting from 16.6 prior to 16.6.1. It was possible for a user with the Developer role to update a pipeline schedule from...
Gitlab Gitlab
Gitlab Gitlab 16.6.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38298
CVE-2024-20356
CVE-2023-21987
CVE-2024-33217
bypass
CVE-2024-31804
CVE-2024-32660
unauthorized
SSRF
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
9
10
NEXT »