Vulnerabilities in GitLab

1,178 results
CVE-2020-13298HIGHA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Conan package upload functionality was not properly valEPSS 1.2%CVE-2023-1733MEDIUMA denial of service condition exists in the Prometheus server bundled with GitLab affecting all versions from 11.10 to 15.8.5, 15.9 to 15.9.EPSS 1.2%CVE-2023-5207HIGHExecution with Unnecessary Privileges in GitLabEPSS 1.2%CVE-2022-2497HIGHAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.0.5, all versions starting from 15.1 beforeEPSS 1.2%CVE-2021-39892MEDIUMIn all versions of GitLab CE/EE since version 12.0, a lower privileged user can import users from projects that they don't have a maintainerEPSS 1.2%CVE-2020-13299HIGHA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The revocation feature was not revoking all session tokEPSS 1.2%CVE-2020-13352LOWPrivate group info is leaked leaked in GitLab CE/EE version 10.2 and above, when the project is moved from private to public group. AffectedEPSS 1.2%CVE-2021-39941LOWAn information disclosure vulnerability in GitLab CE/EE versions 12.0 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed non-project membEPSS 1.2%CVE-2020-13294MEDIUMIn GitLab before 13.0.12, 13.1.6 and 13.2.3, access grants were not revoked when a user revoked access to an application.EPSS 1.2%CVE-2022-3759MEDIUMAn issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 15.6.7, all versions starting from 15.7 beforeEPSS 1.2%CVE-2020-26411MEDIUMA potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x (>=13.4 to <13.4.7, >=13.5 to <13.5.5, and >=13.EPSS 1.2%CVE-2023-0518MEDIUMAn issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 beforeEPSS 1.2%CVE-2022-3279LOWAn unhandled exception in job log parsing in GitLab CE/EE affecting all versions prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15EPSS 1.2%CVE-2021-22177MEDIUMPotential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource EPSS 1.2%CVE-2020-13279HIGHClient side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user systemEPSS 1.2%CVE-2021-39914LOWA regular expression denial of service issue in GitLab versions 8.13 to 14.2.5, 14.3.0 to 14.3.3 and 14.4.0 could cause excessive usage of rEPSS 1.2%CVE-2021-39897LOWImproper access control in GitLab CE/EE version 10.5 and above allowed subgroup members with inherited access to a project from a parent groEPSS 1.2%CVE-2020-13320MEDIUMAn issue has been discovered in GitLab before version 12.10.13 that allowed a project member with limited permissions to view the project seEPSS 1.2%CVE-2022-1460MEDIUMAn issue has been discovered in GitLab affecting all versions starting from 9.2 before 14.8.6, all versions starting from 14.9 before 14.9.4EPSS 1.2%CVE-2022-2908MEDIUMA potential DoS vulnerability was discovered in Gitlab CE/EE versions starting from 10.7 before 15.1.5, all versions starting from 15.2 befoEPSS 1.2%