Exposure of GitLab

Development, Issue trackers
331
exposure score
761
sites use
4
exploited
24
critical

CVEs

1,068 results
CVE-2022-1189LOWAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.2 before 14.7.7, all versions starting from 14.8 beforeEPSS 0.7%CVE-2020-13338MEDIUMAn issue has been discovered in GitLab affecting versions prior to 12.10.13, 13.0.8, 13.1.2. A stored cross-site scripting vulnerability wasEPSS 0.7%CVE-2024-6324MEDIUMInefficient Algorithmic Complexity in GitLabEPSS 0.7%CVE-2020-13350LOWCSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able to target GitLab instance administrators toEPSS 0.7%CVE-2022-4289MEDIUMAn issue has been discovered in GitLab affecting all versions starting from 15.3 before 15.7.8, versions of 15.8 before 15.8.4, and version EPSS 0.7%CVE-2023-2013LOWAn issue has been discovered in GitLab CE/EE affecting all versions starting from 1.2 before 15.10.8, all versions starting from 15.11 beforEPSS 0.7%CVE-2020-13289MEDIUMA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. In certain cases an invalid username could be accepted EPSS 0.7%CVE-2022-1124MEDIUMAn improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior tEPSS 0.7%CVE-2022-2498MEDIUMAn issue in pipeline subscriptions in GitLab EE affecting all versions from 12.8 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15EPSS 0.7%CVE-2024-8114HIGHMissing Authorization in GitLabEPSS 0.7%CVE-2023-5933MEDIUMImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLabEPSS 0.7%CVE-2023-0450LOWAn issue has been discovered in GitLab affecting all versions starting from 8.1 to 15.8.5, and from 15.9 to 15.9.4, and from 15.10 to 15.10.EPSS 0.7%CVE-2022-2270LOWAn issue has been discovered in GitLab affecting all versions starting from 12.4 before 14.10.5, all versions starting from 15.0 before 15.0EPSS 0.7%CVE-2020-13282LOWFor GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs, members from a parent group keep their access level on the subgroupEPSS 0.7%CVE-2022-0488LOWAn issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trigger a timeout on a paEPSS 0.7%CVE-2022-2326MEDIUMAn issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versioEPSS 0.7%CVE-2024-9631HIGHInefficient Algorithmic Complexity in GitLabEPSS 0.7%CVE-2022-2244MEDIUMAn improper authorization vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prEPSS 0.7%CVE-2020-13331MEDIUMAn issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS by in the Wiki pasges.EPSS 0.7%CVE-2024-2800MEDIUMUncontrolled Resource Consumption in GitLabEPSS 0.7%

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →