Exposure of GitLab

Development, Issue trackers
402
exposure score
532
sites use
6
exploited
31
critical

CVEs

1,178 results
CVE-2021-39912MEDIUMA potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7. Using a malformed TIFF images was possible to triggEPSS 1.5%CVE-2021-39907MEDIUMA potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The stripping of EXIF data from certain images resuEPSS 1.5%CVE-2022-0489LOWAn issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was possible to trigger a DOS by using the math EPSS 1.5%CVE-2022-0741MEDIUMImproper input validation in all versions of GitLab CE/EE using sendmail to send emails allowed an attacker to steal environment variables vEPSS 1.5%CVE-2022-1431MEDIUMAn issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting from 14.9 before 14.9EPSS 1.5%CVE-2022-2455MEDIUMA business logic issue in the handling of large repositories in all versions of GitLab CE/EE from 10.0 before 15.1.6, all versions starting EPSS 1.5%CVE-2021-22188MEDIUMAn issue has been discovered in GitLab affecting all versions starting with 13.0. Confidential issue titles in Gitlab were readable by an unEPSS 1.5%CVE-2021-39933MEDIUMAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.3.6, all versions starting from 14.4 beforEPSS 1.5%CVE-2020-26405HIGHPath traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8 allows an attacker to save packages in arbitEPSS 1.5%CVE-2022-0751MEDIUMInaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to create Snippets withEPSS 1.4%CVE-2020-26406MEDIUMCertain SAST CiConfiguration information could be viewed by unauthorized users in GitLab EE starting with 13.3. This information was exposedEPSS 1.4%CVE-2020-26417MEDIUMInformation disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6EPSS 1.4%CVE-2020-13316MEDIUMA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not validating a Deploy-Token and allowed a EPSS 1.4%CVE-2020-13317MEDIUMA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8, and 13.3.4. An insufficient check in the GraphQL api allowed a maiEPSS 1.4%CVE-2020-13354MEDIUMA potential DOS vulnerability was discovered in GitLab CE/EE starting with version 12.6. The container registry name check could cause exponEPSS 1.4%CVE-2020-13321HIGHA vulnerability was discovered in GitLab versions prior to 13.1. Username format restrictions could be bypassed allowing for html tags to beEPSS 1.4%CVE-2021-39903MEDIUMIn all versions of GitLab CE/EE since version 13.0, a privileged user, through an API call, can change the visibility level of a group or a EPSS 1.4%CVE-2021-39942MEDIUMA denial of service vulnerability in GitLab CE/EE affecting all versions starting from 12.0 before 14.3.6, all versions starting from 14.4 bEPSS 1.4%CVE-2017-0926—Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component resulting in unauthoriEPSS 1.4%CVE-2022-1963MEDIUMAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 14.10.5, all versions starting from 15.0 beforEPSS 1.4%