Vulnerabilidades en GitLab
1178 resultadosCVE-2021-22183MEDIUMAn issue has been discovered in GitLab affecting all versions starting with 11.8. GitLab was vulnerable to a stored XSS in the epics page, wEPSS 0.8%CVE-2021-39916MEDIUMLack of an access control check in the External Status Check feature allowed any authenticated user to retrieve the configuration of any ExtEPSS 0.8%CVE-2021-39930MEDIUMMissing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and 14.5.2 allowed an attEPSS 0.8%CVE-2021-39889MEDIUMIn all versions of GitLab EE since version 14.1, due to an insecure direct object reference vulnerability, an endpoint may reveal the protecEPSS 0.8%CVE-2025-13927HIGHAllocation of Resources Without Limits or Throttling in GitLabEPSS 0.8%CVE-2021-22169MEDIUMAn issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages.EPSS 0.8%CVE-2021-22250MEDIUMImproper authorization in GitLab CE/EE affecting all versions since 13.3 allowed users to view and delete impersonation tokens that administEPSS 0.8%CVE-2023-0805MEDIUMAn issue has been discovered in GitLab EE affecting all versions starting from 15.2 before 15.9.6, all versions starting from 15.10 before 1EPSS 0.8%CVE-2023-5356HIGHIncorrect Authorization in GitLabEPSS 0.8%CVE-2022-0427HIGHMissing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows an attacker to perforEPSS 0.8%CVE-2022-3288LOWA branch/tag name confusion in GitLab CE/EE affecting all versions prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows anEPSS 0.8%CVE-2021-39904MEDIUMAn Improper Access Control vulnerability in the GraphQL API in all versions of GitLab CE/EE starting from 13.1 before 14.2.6, all versions sEPSS 0.8%CVE-2020-26415MEDIUMInformation about the starred projects for private user profiles was exposed via the GraphQL API starting from 12.2 via the REST API. This aEPSS 0.8%CVE-2022-2904HIGHA cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions starting from 15.2 before 15.2.5, all versions startEPSS 0.8%CVE-2022-0371MEDIUMAn issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 before 14.5.4, all versions starting from 14.6 beforeEPSS 0.8%CVE-2025-11447HIGHAllocation of Resources Without Limits or Throttling in GitLabEPSS 0.8%CVE-2021-22221MEDIUMAn issue has been discovered in GitLab affecting all versions starting from 12.9.0 before 13.10.5, all versions starting from 13.11.0 beforeEPSS 0.8%CVE-2022-3331LOWAn issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting from 15.2 before 15EPSS 0.8%CVE-2021-22251MEDIUMImproper validation of invited users' email address in GitLab EE affecting all versions since 12.2 allowed projects to add members with emaiEPSS 0.8%CVE-2023-2485MEDIUMIncorrect Privilege Assignment in GitLabEPSS 0.8%