Exposure of GitLab

Development, Issue trackers
402
exposure score
532
sites use
6
exploited
31
critical

CVEs

1,178 results
CVE-2021-22198MEDIUMAn issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing an authenticated user to delete incident meEPSS 1.1%CVE-2022-2826LOWAn issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.1EPSS 1.1%CVE-2020-13268MEDIUMA specially crafted request could be used to confirm the existence of files hosted on object storage services, without disclosing their contEPSS 1.1%CVE-2022-2095MEDIUMAn improper access control check in GitLab CE/EE affecting all versions starting from 13.7 before 15.0.5, all versions starting from 15.1 beEPSS 1.1%CVE-2022-3067MEDIUMAn issue has been discovered in the Import functionality of GitLab CE/EE affecting all versions starting from 14.4 before 15.2.5, all versioEPSS 1.1%CVE-2021-39936LOWImproper access control in GitLab CE/EE affecting all versions starting from 10.7 before 14.3.6, all versions starting from 14.4 before 14.4EPSS 1.1%CVE-2022-3482MEDIUMAn improper access control issue in GitLab CE/EE affecting all versions from 11.3 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 1EPSS 1.1%CVE-2021-22248MEDIUMImproper authorization on the pipelines page in GitLab CE/EE affecting all versions since 13.12 allowed unauthorized users to view some pipeEPSS 1.1%CVE-2022-1954MEDIUMA Regular Expression Denial of Service vulnerability in GitLab CE/EE affecting all versions from 1.0.2 prior to 14.10.5, 15.0 prior to 15.0.EPSS 1.1%CVE-2020-13280MEDIUMFor GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message.EPSS 1.1%CVE-2021-39874MEDIUMIn all versions of GitLab CE/EE since version 11.0, the requirement to enforce 2FA is not honored when using git commands.EPSS 1.0%CVE-2021-39873MEDIUMIn all versions of GitLab CE/EE, there exists a content spoofing vulnerability which may be leveraged by attackers to trick users into visitEPSS 1.0%CVE-2020-13275HIGHA user with an unverified email address could request an access to domain restricted groups in GitLab EE 12.2 and later through 13.0.1EPSS 1.0%CVE-2021-39946HIGHImproper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed an attacker to expEPSS 1.0%CVE-2021-39877HIGHA vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to cause uncontrolled resource consumption with EPSS 1.0%CVE-2026-0723HIGHUnchecked Return Value in GitLabEPSS 1.0%CVE-2020-13293MEDIUMIn GitLab before 13.0.12, 13.1.6 and 13.2.3 using a branch with a hexadecimal name could override an existing hash.EPSS 1.0%CVE-2022-2501MEDIUMAn improper access control issue in GitLab EE affecting all versions from 12.0 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2EPSS 1.0%CVE-2022-3478MEDIUMAn issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.4.6, all versions starting from 15.5 before 15.5.EPSS 1.0%CVE-2023-2182MEDIUMAn issue has been discovered in GitLab EE affecting all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 beforeEPSS 1.0%