Vulnerability index

Browse CVEs

1,035 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

GitLab HIGH 7.5
CVE-2022-2498

An issue in pipeline subscriptions in GitLab EE affecting all versions from 12.8 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 trig…

Fix: 15.0.5 / 15.1.4+
Fix from $1,950 2022-08-05
GitLab HIGH 7.5
CVE-2022-2501

An improper access control issue in GitLab EE affecting all versions from 12.0 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows…

Fix: 15.0.5 / 15.1.4+
Fix from $1,950 2022-08-05
GitLab MEDIUM 6.5
CVE-2022-2512

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, …

Fix: 15.0.5 / 15.1.4+
Fix from $1,600 2022-08-05
GitLab MEDIUM 6.4
CVE-2022-2497

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.0.5, all versions starting from 15.1 before 15.1.4, …

Fix: 15.0.5 / 15.1.4+
Fix from $1,600 2022-08-05
GitLab MEDIUM 5.4
CVE-2022-2500

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1…

Fix: 15.0.5 / 15.1.4+
Fix from $1,600 2022-08-05
GitLab MEDIUM 5.3
CVE-2022-2531

An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions starting from 15.1 before 15.1.4, all…

Fix: 15.0.5 / 15.1.4+
Fix from $1,600 2022-08-05
GitLab MEDIUM 5.3
CVE-2022-2534

An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions starting from 15.1 before 15.1.4, a…

Fix: 15.0.5 / 15.1.4+
Fix from $1,600 2022-08-05
GitLab MEDIUM 5.3
CVE-2022-2539

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.…

Fix: 15.0.5 / 15.1.4+
Fix from $1,600 2022-08-05
GitLab HIGH 8.1
CVE-2022-2326

An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starti…

Fix: 15.0.5 / 15.1.4+
Fix from $1,950 2022-08-05
GitLab MEDIUM 5.4
CVE-2022-1948

An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1. Missing validation of input used in quick actions all…

Mitigation only
Fix from $1,600 2022-07-28
GitLab MEDIUM 6.1
CVE-2022-0167

An issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all …

Fix: 14.4.5 / 14.5.3+
Fix from $1,600 2022-07-01
GitLab MEDIUM 5.3
CVE-2022-1954

A Regular Expression Denial of Service vulnerability in GitLab CE/EE affecting all versions from 1.0.2 prior to 14.10.5, 15.0 prior to 15.0.4, and 15…

Fix: 14.10.5 / 15.0.4+
Fix from $1,600 2022-07-01
GitLab HIGH 7.5
CVE-2022-2229

An improper authorization issue in GitLab CE/EE affecting all versions from 13.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 all…

Fix: 14.10.5 / 15.0.4+
Fix from $1,950 2022-07-01
GitLab MEDIUM 6.5
CVE-2022-2228

Information exposure in GitLab EE affecting all versions from 12.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacke…

Fix: 14.10.5 / 15.0.4+
Fix from $1,600 2022-07-01
GitLab MEDIUM 5.3
CVE-2022-1963

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 14.10.5, all versions starting from 15.0 before 15.0.4,…

Fix: 14.10.5 / 15.0.4+
Fix from $1,600 2022-07-01
GitLab MEDIUM 5.3
CVE-2022-1999

An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1. Under…

Fix: 14.10.5 / 15.0.4+
Fix from $1,600 2022-07-01
GitLab MEDIUM 5.3
CVE-2022-2270

An issue has been discovered in GitLab affecting all versions starting from 12.4 before 14.10.5, all versions starting from 15.0 before 15.0.4, all v…

Fix: 14.10.5 / 15.0.4+
Fix from $1,600 2022-07-01
GitLab HIGH 8.8
CVE-2022-2185EPSS 77%

A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15…

Fix: 14.10.5 / 15.0.4+
Fix from $1,950 2022-07-01
GitLab MEDIUM 6.1
CVE-2022-2250

An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, all…

Fix: 14.0.5 / 14.10.5+
Fix from $1,600 2022-07-01
GitLab MEDIUM 5.4
CVE-2022-2235

Insufficient sanitization in GitLab EE's external issue tracker affecting all versions from 14.5 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 pri…

Fix: 14.10.5 / 15.0.4+
Fix from $1,600 2022-07-01
GitLab MEDIUM 5.3
CVE-2022-2281

An information disclosure vulnerability in GitLab EE affecting all versions from 12.5 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.…

Fix: 14.10.5 / 15.0.4+
Fix from $1,600 2022-07-01
GitLab HIGH 8.8
CVE-2022-1680EPSS 15%

An account takeover issue has been discovered in GitLab EE affecting all versions starting from 11.10 before 14.9.5, all versions starting from 14.10…

Fix: 14.9.5 / 14.10.4+
Fix from $1,950 2022-06-06
GitLab HIGH 7.1
CVE-2022-1944

When the feature is configured, improper authorization in the Interactive Web Terminal in GitLab CE/EE affecting all versions from 11.3 prior to 14.9…

Fix: 14.9.5 / 14.10.4+
Fix from $1,950 2022-06-06
GitLab MEDIUM 6.5
CVE-2022-1935

Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions st…

Fix: 14.9.5 / 14.10.4+
Fix from $1,600 2022-06-06
GitLab MEDIUM 6.5
CVE-2022-1936

Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions st…

Fix: 14.9.5 / 14.10.4+
Fix from $1,600 2022-06-06
GitLab MEDIUM 5.4
CVE-2022-1940EPSS 6%

A Stored Cross-Site Scripting vulnerability in Jira integration in GitLab EE affecting all versions from 13.11 prior to 14.9.5, 14.10 prior to 14.10.…

Fix: 14.9.5 / 14.10.4+
Fix from $1,600 2022-06-06
Gitlab Runner HIGH 7.5
CVE-2021-39947

In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2 would re-use the file descri…

Fix: 14.3.4 / 14.4.2+
Fix from $1,950 2022-06-06
GitLab HIGH 8.8
CVE-2022-1423

Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9…

Fix: 14.8.6 / 14.9.4+
Fix from $1,950 2022-05-19
GitLab HIGH 7.5
CVE-2022-1413

Missing input masking in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versi…

Fix: 14.8.6 / 14.9.4+
Fix from $1,950 2022-05-19
GitLab MEDIUM 5.4
CVE-2022-1416

Missing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 1…

Fix: 14.8.6 / 14.9.4+
Fix from $1,600 2022-05-19