gitlab Vulnerability Advisory Catalog

Total 1,419 security vulnerabilities recorded for gitlab software and firmware.

← Back to All Vendors
CVE-2022-3413 MEDIUM
Component: gitlab

Incorrect authorization during display of Audit Events in GitLab EE affecting all versions from 14.5 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 p...

📅 2022-11-10
CVSS 4.3 Dossier →
CVE-2022-3486 MEDIUM
Component: gitlab

An open redirect vulnerability in GitLab EE/CE affecting all versions from 9.3 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2, allows...

📅 2022-11-09
CVSS 4.7 Dossier →
CVE-2022-3483 MEDIUM
Component: gitlab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 15.3.5, all versions starting from 15.4 before 15.4.4, a...

📅 2022-11-09
CVSS 5.5 Dossier →
CVE-2022-3285 MEDIUM
Component: gitlab

Bypass of healthcheck endpoint allow list affecting all versions from 12.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an u...

📅 2022-11-09
CVSS 5.3 Dossier →
Component: gitlab

An open redirect in GitLab CE/EE affecting all versions from 10.1 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker t...

📅 2022-11-09
CVSS 3.5 Dossier →
Component: gitlab

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5....

📅 2022-11-09
CVSS 7.3 Dossier →
CVE-2022-2761 MEDIUM
Component: gitlab

An information disclosure issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allow...

📅 2022-11-09
CVSS 4.3 Dossier →
Component: gitlab

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions starting from 15.2 before 15.2.5, all versions starting from 1...

📅 2022-11-02
CVSS 7.3 Dossier →
Component: gitlab

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all v...

📅 2022-10-28
CVSS 2.7 Dossier →
CVE-2022-3018 MEDIUM
Component: gitlab

An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before...

📅 2022-10-28
CVSS 6.8 Dossier →
CVE-2022-2882 MEDIUM
Component: gitlab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.2.5, all versions starting from 15.3 before 15.3.4, a...

📅 2022-10-28
CVSS 5.5 Dossier →
CVE-2022-3639 MEDIUM
Component: gitlab

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 10.8 before 15.1.6, all versions starting from 15.2 before 15...

📅 2022-10-21
CVSS 4.3 Dossier →
CVE-2022-3351 MEDIUM
Component: gitlab

An issue has been discovered in GitLab EE affecting all versions starting from 13.7 before 15.2.5, all versions starting from 15.3 before 15.3.4, all ...

📅 2022-10-17
CVSS 4.3 Dossier →
Component: gitlab

An issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting from 15.2 before 15.2.4, all ...

📅 2022-10-17
CVSS 3.5 Dossier →
CVE-2022-3330 MEDIUM
Component: gitlab

It was possible for a guest user to read a todo targeting an inaccessible note in Gitlab CE/EE affecting all versions from 15.0 prior to 15.2.5, 15.3 ...

📅 2022-10-17
CVSS 4.3 Dossier →
Component: gitlab

Improper access control in the GitLab CE/EE API affecting all versions starting from 12.8 before 15.2.5, all versions starting from 15.3 before 15.3.4...

📅 2022-10-17
CVSS 2.7 Dossier →
Component: gitlab

Email addresses were leaked in WebHook logs in GitLab EE affecting all versions from 9.3 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4...

📅 2022-10-17
CVSS 3.5 Dossier →
CVE-2022-3291 MEDIUM
Component: gitlab

Serialization of sensitive data in GitLab EE affecting all versions from 14.9 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 can leak...

📅 2022-10-17
CVSS 6.5 Dossier →
Component: gitlab

A branch/tag name confusion in GitLab CE/EE affecting all versions prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an attacker ...

📅 2022-10-17
CVSS 3.5 Dossier →
CVE-2022-3286 MEDIUM
Component: gitlab

Lack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows a gro...

📅 2022-10-17
CVSS 5.3 Dossier →
Component: gitlab

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before 15.2.5, all versions starting from 15.3 before 15.3....

📅 2022-10-17
CVSS 7.5 Dossier →
Component: gitlab

An unhandled exception in job log parsing in GitLab CE/EE affecting all versions prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allow...

📅 2022-10-17
CVSS 2.7 Dossier →
CVE-2022-3067 MEDIUM
Component: gitlab

An issue has been discovered in the Import functionality of GitLab CE/EE affecting all versions starting from 14.4 before 15.2.5, all versions startin...

📅 2022-10-17
CVSS 6.5 Dossier →
CVE-2022-3066 MEDIUM
Component: gitlab

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 15.2.5, all versions starting from 15.3 before 15.3.4, all ver...

📅 2022-10-17
CVSS 5.4 Dossier →
Page 28 of 60 (1,419 Total Records)