Vulnerabilidades en GitLab
1178 resultadosCVE-2020-13273HIGHA Denial of Service vulnerability allowed exhausting the system resources in GitLab CE/EE 12.0 and later through 13.0.1EPSS 1.2%CVE-2020-13341MEDIUMAn issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Insufficient permission check allows attaEPSS 1.2%CVE-2020-13301MEDIUMA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was vulnerable to a stored XSS on the standaloneEPSS 1.2%CVE-2022-2251MEDIUMImproper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.EPSS 1.2%CVE-2021-39875MEDIUMIn all versions of GitLab CE/EE since version 13.6, it is possible to see pending invitations of any public group or public project by visitEPSS 1.2%CVE-2021-39915MEDIUMImproper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all versions starting frEPSS 1.2%CVE-2022-1148MEDIUMImproper authorization in GitLab Pages included with GitLab CE/EE affecting all versions from 11.5 prior to 14.7.7, 14.8 prior to 14.8.5, anEPSS 1.2%CVE-2020-13295MEDIUMFor GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF.EPSS 1.2%CVE-2021-39888MEDIUMIn all versions of GitLab EE starting from 13.10 before 14.1.7, all versions starting from 14.2 before 14.2.5, and all versions starting froEPSS 1.2%CVE-2022-1406MEDIUMImproper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14EPSS 1.2%CVE-2023-4522MEDIUMImproper Validation of Specified Type of Input in GitLabEPSS 1.2%CVE-2022-2527HIGHAn issue in Incident Timelines has been discovered in GitLab CE/EE affecting all versions starting from 14.9 before 15.1.6, all versions staEPSS 1.2%CVE-2022-1120MEDIUMMissing filtering in an error message in GitLab CE/EE affecting all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2EPSS 1.2%CVE-2022-3740MEDIUMAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 priorEPSS 1.1%CVE-2020-13322HIGHA vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create aEPSS 1.1%CVE-2020-13274HIGHA security issue allowed achieving Denial of Service attacks through memory exhaustion by uploading malicious artifacts in all previous GitLEPSS 1.1%CVE-2021-22195HIGHClient side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user systemEPSS 1.1%CVE-2021-39885HIGHA Stored XSS in merge request creation page in all versions of Gitlab EE starting from 13.7 before 14.1.7, all versions starting from 14.2 bEPSS 1.1%CVE-2019-5465—An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosEPSS 1.1%CVE-2020-13302LOWA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Under certain conditions GitLab was not properly revokiEPSS 1.1%