Browse CVEs

HIGH 7.5 CVE-2023-3904 An issue has been discovered in GitLab EE affecting all versions starting before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions … GitLab 16.4.4 / 16.5.4+ Fix from $1,9502023-12-15 HIGH 8.1 CVE-2023-5332 Patch in third party library Consul requires 'enable-script-checks' to be set to False. This was required to enable a patch by the vendor. Without th… GitLab 0.9.4 / 1.0.8+ Fix from $1,9502023-12-04 HIGH 7.5 CVE-2023-5995 An issue has been discovered in GitLab EE affecting all versions starting from 16.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all… GitLab 16.4.3 / 16.5.3+ Fix from $1,9502023-12-01 MEDIUM 5.4 CVE-2023-6033 Improper neutralization of input in Jira integration configuration in GitLab CE/EE, affecting all versions from 15.10 prior to 16.6.1, 16.5 prior to … GitLab 16.4.3 / 16.5.3+ Fix from $1,6002023-12-01 HIGH 7.5 CVE-2023-5226 An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting fro… GitLab 16.4.3 / 16.5.3+ Fix from $1,9502023-12-01 MEDIUM 6.5 CVE-2023-4912 An issue has been discovered in GitLab EE affecting all versions starting from 10.5 before 16.4.3, all versions starting from 16.5 before 16.5.3, all… GitLab 16.4.3 / 16.5.3+ Fix from $1,6002023-12-01 MEDIUM 5.3 CVE-2023-3949 An issue has been discovered in GitLab affecting all versions starting from 11.3 before 16.4.3, all versions starting from 16.5 before 16.5.3, all ve… GitLab 16.4.3 / 16.5.3+ Fix from $1,6002023-12-01 HIGH 7.5 CVE-2023-4379 An issue has been discovered in GitLab EE affecting all versions starting from 15.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. … GitLab 16.2.8 / 16.3.5+ Fix from $1,9502023-11-09 MEDIUM 6.5 CVE-2023-4700 An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1, allowed … GitLab 16.3.6 / 16.4.2+ Fix from $1,6002023-11-06 HIGH 7.7 CVE-2023-3399 An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting from 16.4 before 16.4.2, all… GitLab 12.9.8 / 12.10.7+ Fix from $1,9502023-11-06 MEDIUM 6.5 CVE-2023-3909 An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.3 before 16.3.6, all versions starting from 16.4 before 16.4.2, … GitLab 16.3.6 / 16.4.2+ Fix from $1,6002023-11-06 MEDIUM 6.5 CVE-2023-5825 An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.2 before 16.3.6, all versions starting from 16.4 before 16.4.2, … GitLab 16.3.6 / 16.4.2+ Fix from $1,6002023-11-06 MEDIUM 5.3 CVE-2023-5831 An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, … GitLab 16.3.6 / 16.4.2+ Fix from $1,6002023-11-06 HIGH 7.5 CVE-2023-5106 An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0… GitLab 16.2.8 / 16.3.5+ Fix from $1,9502023-10-02 HIGH 8.8 CVE-2023-5207 A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4… GitLab 16.2.8 / 16.3.5+ Fix from $1,9502023-09-30 HIGH 7.5 CVE-2023-3413 An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all ve… GitLab 16.2.8 / 16.3.5+ Fix from $1,9502023-09-29 HIGH 7.1 CVE-2023-3922 An issue has been discovered in GitLab affecting all versions starting from 8.15 before 16.2.8, all versions starting from 16.3 before 16.3.5, all ve… GitLab 16.2.8 / 16.3.5+ Fix from $1,9502023-09-29 HIGH 7.5 CVE-2023-3917 Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows atta… GitLab 16.2.8 / 16.3.5+ Fix from $1,9502023-09-29 MEDIUM 5.3 CVE-2023-3914 A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal … GitLab 16.2.8 / 16.3.5+ Fix from $1,6002023-09-29 MEDIUM 5.7 CVE-2023-0989 An information disclosure issue in GitLab CE/EE affecting all versions starting from 13.11 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 1… GitLab 16.2.8 / 16.3.5+ Fix from $1,6002023-09-29 CRITICAL 9.8 CVE-2023-5009EPSS 8% An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4. It… GitLab 16.2.7 / 16.3.4+ Fix from $2,3002023-09-19 HIGH 7.5 CVE-2023-4647 An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting from 16.2 before 16.2.5, all ve… GitLab 16.1.5 / 16.2.5+ Fix from $1,9502023-09-01 MEDIUM 5.3 CVE-2023-4018 An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. Due to… GitLab 16.2.5+ Fix from $1,6002023-09-01 HIGH 7.2 CVE-2023-3915 An issue has been discovered in GitLab EE affecting all versions starting from 16.1 before 16.1.5, all versions starting from 16.2 before 16.2.5, all… GitLab 16.1.5 / 16.2.5+ Fix from $1,9502023-09-01 MEDIUM 6.5 CVE-2023-3210 An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all v… GitLab 16.1.5 / 16.2.5+ Fix from $1,6002023-09-01 MEDIUM 6.5 CVE-2023-3205 An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all v… GitLab 16.1.5 / 16.2.5+ Fix from $1,6002023-09-01 MEDIUM 6.1 CVE-2023-1279 An issue has been discovered in GitLab affecting all versions starting from 4.1 before 16.1.5, all versions starting from 16.2 before 16.2.5, all ver… GitLab 16.1.5 / 16.2.5+ Fix from $1,6002023-09-01 MEDIUM 5.3 CVE-2023-4522 An issue has been discovered in GitLab affecting all versions before 16.2.0. Committing directories containing LF character results in 500 errors whe… GitLab 16.2.0+ Fix from $1,6002023-08-30 MEDIUM 6.5 CVE-2023-4002 An issue has been discovered in GitLab EE affecting all versions starting from 14.1 before 16.0.8, all versions starting from 16.1 before 16.1.3, all… GitLab 16.0.8 / 16.1.3+ Fix from $1,6002023-08-04 CRITICAL 9.8 CVE-2023-4008 An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.9 before 16.0.8, all versions starting from 16.1 before 16.1.3, … GitLab 16.0.8 / 16.1.3+ Fix from $2,3002023-08-03