Exposición de GitLab

Development, Issue trackers
402
score de exposición
532
sitios usan
6
en explotación
31
críticos

CVEs

1178 resultados
CVE-2021-39876MEDIUMIn all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee discloses the members of private groups.EPSS 0.9%CVE-2021-22209HIGHAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.8. GitLab was not properly validating authorisation tokEPSS 0.9%CVE-2021-22247MEDIUMImproper authorization in GitLab CE/EE affecting all versions since 13.0 allows guests in private projects to view CI/CD analyticsEPSS 0.9%CVE-2022-2281LOWAn information disclosure vulnerability in GitLab EE affecting all versions from 12.5 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 priorEPSS 0.9%CVE-2022-2907MEDIUMAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 15.1.6, all versions starting from 15.2 beforeEPSS 0.9%CVE-2021-39871MEDIUMIn all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable Bitbucket Server import enabled is bypassed EPSS 0.9%CVE-2023-3917MEDIUMImproper Validation of Specified Type of Input in GitLabEPSS 0.9%CVE-2020-13325HIGHA vulnerability was discovered in GitLab versions prior 13.1. The comment section of the issue page was not restricting the characters propeEPSS 0.9%CVE-2022-3486MEDIUMAn open redirect vulnerability in GitLab EE/CE affecting all versions from 9.3 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5EPSS 0.9%CVE-2022-0125MEDIUMAn issue has been discovered in GitLab affecting all versions starting from 12.0 before 14.4.5, all versions starting from 14.5.0 before 14.EPSS 0.9%CVE-2021-22226MEDIUMUnder certain conditions, some users were able to push to protected branches that were restricted to deploy keys in GitLab CE/EE since versiEPSS 0.9%CVE-2021-39938LOWA vulnerable regular expression pattern in GitLab CE/EE since version 8.15 before 14.3.6, all versions starting from 14.4 before 14.4.4, allEPSS 0.9%CVE-2022-0549MEDIUMAn issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions starting from 14.4 before 14.4.4, all versioEPSS 0.9%CVE-2021-22199LOWAn issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored XSS if scoped labels werEPSS 0.9%CVE-2022-2235HIGHInsufficient sanitization in GitLab EE's external issue tracker affecting all versions from 14.5 prior to 14.10.5, 15.0 prior to 15.0.4, andEPSS 0.9%CVE-2023-0632MEDIUMInefficient Regular Expression Complexity in GitLabEPSS 0.9%CVE-2023-3900MEDIUMImproper Validation of Specified Type of Input in GitLabEPSS 0.9%CVE-2026-10053HIGHImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabEPSS 0.9%CVE-2022-0390MEDIUMImproper access control in Gitlab CE/EE versions 12.7 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1 allowed for project non-members to retriEPSS 0.9%CVE-2020-13349MEDIUMAn issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted inEPSS 0.9%