Exposición de GitLab

Development, Issue trackers
402
score de exposición
532
sitios usan
6
en explotación
31
críticos

CVEs

1178 resultados
CVE-2021-39872MEDIUMIn all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability allows users with expired password to still accEPSS 1.0%CVE-2023-6159MEDIUMInefficient Regular Expression Complexity in GitLabEPSS 1.0%CVE-2021-22253MEDIUMImproper authorization in GitLab EE affecting all versions since 13.4 allowed a user who previously had the necessary access to trigger deplEPSS 1.0%CVE-2021-39910LOWAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 14.3.6, all versions starting from 14.4 beforeEPSS 1.0%CVE-2020-13318MEDIUMA vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4. GitLabs EKS integration was vulnerable to a crEPSS 1.0%CVE-2022-0740LOWIncorrect authorization in the Asana integration's branch restriction feature in all versions of GitLab CE/EE starting from version 7.8.0 beEPSS 1.0%CVE-2021-39866MEDIUMA business logic error in the project deletion process in GitLab 13.6 and later allows persistent access via project access tokens.EPSS 1.0%CVE-2021-22261HIGHA stored Cross-Site Scripting vulnerability in the Jira integration in all GitLab versions starting from 13.9 before 14.0.9, all versions stEPSS 1.0%CVE-2022-3726MEDIUMLack of sand-boxing of OpenAPI documents in GitLab CE/EE affecting all versions from 12.6 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prEPSS 1.0%CVE-2020-13313MEDIUMA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. An unauthorized project maintainer could edit the subgrEPSS 1.0%CVE-2021-39905MEDIUMAn information disclosure vulnerability in the GitLab CE/EE API since version 8.9.6 allows a user to see basic information on private groupsEPSS 1.0%CVE-2021-22249MEDIUMA verbose error message in GitLab EE affecting all versions since 12.2 could disclose the private email address of a user invited to a groupEPSS 1.0%CVE-2022-0124MEDIUMAn issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. Gitlab's SEPSS 1.0%CVE-2021-39934MEDIUMImproper access control allows any project member to retrieve the service desk email address in GitLab CE/EE versions starting 12.10 before EPSS 1.0%CVE-2022-2456MEDIUMAn issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versioEPSS 1.0%CVE-2019-15581—An IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that allowed a project ownEPSS 1.0%CVE-2022-0136MEDIUMA vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1. GitLab was vulnerable to a blind SSRF EPSS 1.0%CVE-2020-13305LOWA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not invalidating project invitation link upoEPSS 1.0%CVE-2023-3994HIGHInefficient Regular Expression Complexity in GitLabEPSS 1.0%CVE-2023-0485MEDIUMAn issue has been discovered in GitLab affecting all versions starting from 13.11 before 15.8.5, all versions starting from 15.9 before 15.9EPSS 1.0%