Exposure of GitLab

Development, Issue trackers
402
exposure score
532
sites use
6
exploited
31
critical

CVEs

1,178 results
CVE-2020-13282LOWFor GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs, members from a parent group keep their access level on the subgroupEPSS 0.8%CVE-2022-3375LOWAn issue has been discovered in GitLab affecting all versions starting from 11.10 before 15.8.5, all versions starting from 15.9 before 15.9EPSS 0.8%CVE-2022-2227LOWImproper access control in the runner jobs API in GitLab CE/EE affecting all versions prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 priorEPSS 0.8%CVE-2022-2243MEDIUMAn access control vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 1EPSS 0.8%CVE-2022-2303MEDIUMAn issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versioEPSS 0.8%CVE-2017-0927—Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthoEPSS 0.8%CVE-2021-39902MEDIUMIncorrect Authorization in GitLab CE/EE 13.4 or above allows a user with guest membership in a project to modify the severity of an incidentEPSS 0.8%CVE-2021-39911LOWAn improper access control flaw in all versions of GitLab CE/EE starting from 13.9 before 14.2.6, all versions starting from 14.3 before 14.EPSS 0.8%CVE-2023-0223MEDIUMAn issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting from 15.8 before 15.8.EPSS 0.8%CVE-2023-1710MEDIUMA sensitive information disclosure vulnerability in GitLab affecting all versions from 15.0 prior to 15.8.5, 15.9 prior to 15.9.4 and 15.10 EPSS 0.8%CVE-2023-1072MEDIUMAn issue has been discovered in GitLab affecting all versions starting from 9.0 before 15.7.8, all versions starting from 15.8 before 15.8.4EPSS 0.8%CVE-2023-4011MEDIUMAllocation of Resources Without Limits or Throttling in GitLabEPSS 0.8%CVE-2025-5996MEDIUMAllocation of Resources Without Limits or Throttling in GitLabEPSS 0.8%CVE-2023-1265MEDIUMAn issue has been discovered in GitLab affecting all versions starting from 11.9 before 15.9.6, all versions starting from 15.10 before 15.1EPSS 0.8%CVE-2022-2228MEDIUMInformation exposure in GitLab EE affecting all versions from 12.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows aEPSS 0.8%CVE-2020-13319MEDIUMAn issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Missing permission check for adding time speEPSS 0.8%CVE-2024-4539MEDIUMAllocation of Resources Without Limits or Throttling in GitLabEPSS 0.8%CVE-2023-0155MEDIUMAn issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10.1. Open redirects was possible due to framiEPSS 0.8%CVE-2021-39883MEDIUMImproper authorization checks in all versions of GitLab EE starting from 13.11 before 14.1.7, all versions starting from 14.2 before 14.2.5,EPSS 0.8%CVE-2023-5825MEDIUMLoop with Unreachable Exit Condition ('Infinite Loop') in GitLabEPSS 0.8%