gitlab Vulnerability Advisory Catalog

Total 1,419 security vulnerabilities recorded for gitlab software and firmware.

← Back to All Vendors
CVE-2022-1680 CRITICAL
Component: gitlab

An account takeover issue has been discovered in GitLab EE affecting all versions starting from 11.10 before 14.9.5, all versions starting from 14.10 ...

📅 2022-06-06
CVSS 9.9 Dossier →
CVE-2022-1944 MEDIUM
Component: gitlab

When the feature is configured, improper authorization in the Interactive Web Terminal in GitLab CE/EE affecting all versions from 11.3 prior to 14.9....

📅 2022-06-06
CVSS 5.4 Dossier →
Component: gitlab

A Stored Cross-Site Scripting vulnerability in Jira integration in GitLab EE affecting all versions from 13.11 prior to 14.9.5, 14.10 prior to 14.10.4...

📅 2022-06-06
CVSS 7.7 Dossier →
CVE-2022-1936 MEDIUM
Component: gitlab

Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions sta...

📅 2022-06-06
CVSS 6.5 Dossier →
CVE-2022-1935 MEDIUM
Component: gitlab

Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions sta...

📅 2022-06-06
CVSS 6.5 Dossier →
CVE-2022-1821 MEDIUM
Component: gitlab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 14.9.5, all versions starting from 14.10 before 14.10.4,...

📅 2022-06-06
CVSS 4.3 Dossier →
Component: gitlab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 14.9.5, all versions starting from 14.10 before 14.10.4,...

📅 2022-06-06
CVSS 2.7 Dossier →
Component: gitlab_runner

In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2 would re-use the file descrip...

📅 2022-06-06
CVSS 5.3 Dossier →
Component: gitlab

Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9....

📅 2022-05-19
CVSS 7.1 Dossier →
CVE-2022-1416 MEDIUM
Component: gitlab

Missing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14...

📅 2022-05-19
CVSS 4.3 Dossier →
CVE-2022-1413 MEDIUM
Component: gitlab

Missing input masking in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versio...

📅 2022-05-19
CVSS 5.4 Dossier →
CVE-2022-1545 MEDIUM
Component: gitlab

It was possible to disclose details of confidential notes created via the API in Gitlab CE/EE affecting all versions from 13.2 prior to 14.8.6, 14.9 p...

📅 2022-05-11
CVSS 4.3 Dossier →
CVE-2022-1510 MEDIUM
Component: gitlab

An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting from 14.9 before 14.9.4, all ver...

📅 2022-05-11
CVSS 6.5 Dossier →
CVE-2022-1460 MEDIUM
Component: gitlab

An issue has been discovered in GitLab affecting all versions starting from 9.2 before 14.8.6, all versions starting from 14.9 before 14.9.4, all vers...

📅 2022-05-11
CVSS 6.1 Dossier →
Component: gitlab

An issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6, all versions starting from 14.9 before 14.9.4, all ver...

📅 2022-05-11
CVSS 2.6 Dossier →
CVE-2022-1428 MEDIUM
Component: gitlab

An issue has been discovered in GitLab affecting all versions before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from...

📅 2022-05-11
CVSS 4.3 Dossier →
Component: gitlab

An issue has been discovered in GitLab affecting all versions starting from 12.6 before 14.8.6, all versions starting from 14.9 before 14.9.4, all ver...

📅 2022-05-11
CVSS 2.0 Dossier →
CVE-2022-1406 MEDIUM
Component: gitlab

Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0 allo...

📅 2022-05-11
CVSS 6.5 Dossier →
CVE-2022-1352 MEDIUM
Component: gitlab

Due to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all versions from 11.0 prior to 14.8.6, 14.9 prior to 14.9.4, and 1...

📅 2022-05-11
CVSS 5.3 Dossier →
CVE-2022-1124 MEDIUM
Component: gitlab

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, ...

📅 2022-05-11
CVSS 4.3 Dossier →
CVE-2022-1431 MEDIUM
Component: gitlab

An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting from 14.9 before 14.9.4, all ve...

📅 2022-05-10
CVSS 4.3 Dossier →
CVE-2022-1417 MEDIUM
Component: gitlab

Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6, all versions starting from 14.9 before 14.9.4, and al...

📅 2022-05-10
CVSS 4.3 Dossier →
CVE-2022-0477 MEDIUM
Component: gitlab

An issue has been discovered in GitLab affecting all versions starting from 11.9 before 14.5.4, all versions starting from 14.6.0 before 14.6.4, all v...

📅 2022-04-25
CVSS 4.9 Dossier →
CVE-2022-1193 MEDIUM
Component: gitlab

Improper access control in GitLab CE/EE versions 10.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows a malicious actor to obta...

📅 2022-04-11
CVSS 4.3 Dossier →
Page 31 of 60 (1,419 Total Records)