Vulnerability index

Browse CVEs

1,035 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

GitLab MEDIUM 5.3
CVE-2022-3514

An issue has been discovered in GitLab CE/EE affecting all versions starting from 6.6 before 15.5.7, all versions starting from 15.6 before 15.6.4, a…

Fix: 15.5.7 / 15.6.4+
Fix from $1,600 2023-01-12
GitLab MEDIUM 5.3
CVE-2022-3870

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions starting from 15.6 before 15.6.4, …

Fix: 15.5.7 / 15.6.4+
Fix from $1,600 2023-01-12
GitLab CRITICAL 9.0
CVE-2022-3726

Lack of sand-boxing of OpenAPI documents in GitLab CE/EE affecting all versions from 12.6 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15…

Fix: 15.3.5 / 15.4.4+
Fix from $2,300 2022-11-10
GitLab MEDIUM 5.3
CVE-2022-3793

An improper authorization issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allo…

Fix: 15.3.5 / 15.4.4+
Fix from $1,600 2022-11-10
GitLab MEDIUM 5.3
CVE-2022-3818

An uncontrolled resource consumption issue when parsing URLs in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 p…

Fix: 15.3.5 / 15.4.4+
Fix from $1,600 2022-11-10
GitLab HIGH 7.5
CVE-2022-3285

Bypass of healthcheck endpoint allow list affecting all versions from 12.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an …

Fix: 15.2.5 / 15.3.4+
Fix from $1,950 2022-11-09
GitLab MEDIUM 6.1
CVE-2022-3486

An open redirect vulnerability in GitLab EE/CE affecting all versions from 9.3 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2, allow…

Fix: 15.3.5 / 15.4.4+
Fix from $1,600 2022-11-09
GitLab MEDIUM 5.4
CVE-2022-3483

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 15.3.5, all versions starting from 15.4 before 15.4.4, …

Fix: 15.3.5 / 15.4.4+
Fix from $1,600 2022-11-09
GitLab MEDIUM 6.1
CVE-2022-3280

An open redirect in GitLab CE/EE affecting all versions from 10.1 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker …

Fix: 15.3.5 / 15.4.4+
Fix from $1,600 2022-11-09
GitLab MEDIUM 5.4
CVE-2022-3265EPSS 86%

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5…

Fix: 15.3.5 / 15.4.4+
Fix from $1,600 2022-11-09
GitLab MEDIUM 5.3
CVE-2022-2761

An information disclosure issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allo…

Fix: 15.3.5 / 15.4.4+
Fix from $1,600 2022-11-09
GitLab MEDIUM 5.4
CVE-2022-2904

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions starting from 15.2 before 15.2.5, all versions starting from …

Fix: 15.2.5 / 15.3.4+
Fix from $1,600 2022-11-02
GitLab CRITICAL 9.8
CVE-2022-2826

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all …

Fix: 12.9.8 / 12.10.7+
Fix from $2,300 2022-10-28
GitLab HIGH 7.5
CVE-2022-3639

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 10.8 before 15.1.6, all versions starting from 15.2 before 1…

Fix: 15.1.6 / 15.2.4+
Fix from $1,950 2022-10-21
GitLab HIGH 7.5
CVE-2022-3031

An issue has been discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starti…

Fix: 15.1.6 / 15.2.4+
Fix from $1,950 2022-10-17
GitLab HIGH 7.5
CVE-2022-3283

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before 15.2.5, all versions starting from 15.3 before 15.3…

Fix: 15.2.5 / 15.3.4+
Fix from $1,950 2022-10-17
GitLab HIGH 7.3
CVE-2022-3060

Improper control of a resource identifier in Error Tracking in GitLab CE/EE affecting all versions from 12.7 allows an authenticated attacker to gene…

Fix: after 12.7.0
Fix from $1,950 2022-10-17
GitLab MEDIUM 6.5
CVE-2022-3067

An issue has been discovered in the Import functionality of GitLab CE/EE affecting all versions starting from 14.4 before 15.2.5, all versions starti…

Fix: 15.2.5 / 15.3.4+
Fix from $1,600 2022-10-17
GitLab MEDIUM 6.5
CVE-2022-3279

An unhandled exception in job log parsing in GitLab CE/EE affecting all versions prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allo…

Fix: 15.2.5 / 15.3.4+
Fix from $1,600 2022-10-17
GitLab MEDIUM 6.5
CVE-2022-3291

Serialization of sensitive data in GitLab EE affecting all versions from 14.9 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 can lea…

Fix: 15.2.5 / 15.3.4+
Fix from $1,600 2022-10-17
GitLab MEDIUM 5.4
CVE-2022-3066

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 15.2.5, all versions starting from 15.3 before 15.3.4, all ve…

Fix: 15.2.5 / 15.3.4+
Fix from $1,600 2022-10-17
GitLab MEDIUM 5.3
CVE-2022-3286

Lack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows a gr…

Fix: 15.2.5 / 15.3.4+
Fix from $1,600 2022-10-17
GitLab CRITICAL 9.9
CVE-2022-2884EPSS 76%

A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3.1 allows an an authenticated…

Fix: 15.1.5 / 15.2.3+
Fix from $2,300 2022-10-17
GitLab CRITICAL 9.9
CVE-2022-2992EPSS 86%

A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated user to ach…

Fix: 15.1.6 / 15.2.4+
Fix from $2,300 2022-10-17
GitLab HIGH 8.0
CVE-2022-2527

An issue in Incident Timelines has been discovered in GitLab CE/EE affecting all versions starting from 14.9 before 15.1.6, all versions starting fro…

Fix: 15.1.6 / 15.2.4+
Fix from $1,950 2022-10-17
GitLab HIGH 7.5
CVE-2022-2931

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all…

Fix: 15.1.6 / 15.2.4+
Fix from $1,950 2022-10-17
GitLab HIGH 7.4
CVE-2022-2533

An issue has been discovered in GitLab affecting all versions starting from 12.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all v…

Fix: 15.1.6 / 15.2.4+
Fix from $1,950 2022-10-17
GitLab MEDIUM 6.5
CVE-2022-2455

A business logic issue in the handling of large repositories in all versions of GitLab CE/EE from 10.0 before 15.1.6, all versions starting from 15.2…

Fix: 15.1.6 / 15.2.4+
Fix from $1,600 2022-10-17
GitLab MEDIUM 6.5
CVE-2022-2592

A lack of length validation in Snippet descriptions in GitLab CE/EE affecting all versions prior to 15.1.6, 15.2 prior to 15.2.4 and 15.3 prior to 15…

Fix: 15.1.6 / 15.2.4+
Fix from $1,600 2022-10-17
GitLab HIGH 7.3
CVE-2022-2428

A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions before 15.1.6, 15.2 to 15.2.4, and 15.3 to 15.3.2 allows an attac…

Fix: 15.1.6 / 15.2.4+
Fix from $1,950 2022-10-17