Browse CVEs

MEDIUM 6.5 CVE-2023-2478EPSS 5% An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.9.7, all versions starting from 15.10 before 15.10.6… GitLab 15.9.7 / 15.10.6+ Fix from $1,6002023-05-08 HIGH 8.8 CVE-2023-2182 An issue has been discovered in GitLab EE affecting all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1.… GitLab 15.10.5+ Fix from $1,9502023-05-03 MEDIUM 5.7 CVE-2023-1178 An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all versions starting from 15.10 before 15.10.5, all vers… GitLab 15.9.6 / 15.10.5+ Fix from $1,6002023-05-03 HIGH 8.1 CVE-2023-0805 An issue has been discovered in GitLab EE affecting all versions starting from 15.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, a… GitLab 15.9.6 / 15.10.5+ Fix from $1,9502023-05-03 HIGH 8.0 CVE-2023-0756 An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting f… GitLab 15.9.6 / 15.10.5+ Fix from $1,9502023-05-03 MEDIUM 6.5 CVE-2023-1965 An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, a… GitLab 15.9.6 / 15.10.5+ Fix from $1,6002023-05-03 MEDIUM 5.4 CVE-2023-1836 A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 15.9.6, all versions starting from 15.10 b… GitLab 15.9.6 / 15.10.5+ Fix from $1,6002023-05-03 MEDIUM 6.5 CVE-2023-0485 An issue has been discovered in GitLab affecting all versions starting from 13.11 before 15.8.5, all versions starting from 15.9 before 15.9.4, all v… GitLab 15.8.5 / 15.9.4+ Fix from $1,6002023-05-03 MEDIUM 5.4 CVE-2023-0155 An issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10.1. Open redirects was possible due to framing arbitr… GitLab 15.8.5 / 15.9.5+ Fix from $1,6002023-05-03 MEDIUM 6.5 CVE-2019-14944 An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6. Gitaly allows injection … GitLab 11.11.8 / 12.0.6+ Fix from $1,6002023-04-16 MEDIUM 5.9 CVE-2019-14942 An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6. Cookies for GitLab Pages… GitLab 11.11.8 / 12.0.6+ Fix from $1,6002023-04-16 MEDIUM 5.4 CVE-2018-17537 An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. blog-viewer has sto… GitLab 11.1.7 / 11.2.4+ Fix from $1,6002023-04-16 CRITICAL 9.8 CVE-2018-17452 An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Server-Sid… GitLab 11.1.7 / 11.2.4+ Fix from $2,3002023-04-15 HIGH 8.8 CVE-2018-17451 An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Cross Site… GitLab 11.1.7 / 11.2.4+ Fix from $1,9502023-04-15 HIGH 7.5 CVE-2018-15472 An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. The diff formatter … GitLab 11.1.7 / 11.2.4+ Fix from $1,9502023-04-15 HIGH 7.5 CVE-2018-17449 An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Remote attackers co… GitLab 11.1.7 / 11.2.4+ Fix from $1,9502023-04-15 HIGH 7.5 CVE-2018-17455 An issue was discovered in GitLab Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Attackers could obtain sensitive … GitLab 11.1.7 / 11.2.4+ Fix from $1,9502023-04-15 MEDIUM 5.4 CVE-2018-17454 An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is stored XSS… GitLab 11.1.7 / 11.2.4+ Fix from $1,6002023-04-15 MEDIUM 5.4 CVE-2018-17536 An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is stored XSS… GitLab 11.1.7 / 11.2.4+ Fix from $1,6002023-04-15 MEDIUM 5.3 CVE-2018-17453 An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Attackers may have … GitLab 11.1.7 / 11.2.4+ Fix from $1,6002023-04-15 CRITICAL 9.8 CVE-2023-1708 An issue was identified in GitLab CE/EE affecting all versions from 1.0 prior to 15.8.5, 15.9 prior to 15.9.4, and 15.10 prior to 15.10.1 where non-p… GitLab 15.8.5 / 15.9.4+ Fix from $2,3002023-04-05 MEDIUM 5.3 CVE-2023-1167 Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions sta… GitLab 15.8.5 / 15.9.4+ Fix from $1,6002023-04-05 MEDIUM 5.3 CVE-2023-1710 A sensitive information disclosure vulnerability in GitLab affecting all versions from 15.0 prior to 15.8.5, 15.9 prior to 15.9.4 and 15.10 prior to … GitLab 15.8.5 / 15.9.4+ Fix from $1,6002023-04-05 MEDIUM 5.3 CVE-2023-1787 An issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. A se… GitLab 15.9.4+ Fix from $1,6002023-04-05 HIGH 7.5 CVE-2023-1733 A denial of service condition exists in the Prometheus server bundled with GitLab affecting all versions from 11.10 to 15.8.5, 15.9 to 15.9.4 and 15.… GitLab 15.8.5 / 15.9.4+ Fix from $1,9502023-04-05 MEDIUM 6.1 CVE-2022-3513 An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.8.5, all versions starting from 15.9 before 15.9.4, all ve… GitLab 15.8.5 / 15.9.4+ Fix from $1,6002023-04-05 MEDIUM 6.1 CVE-2023-0523 An issue has been discovered in GitLab affecting all versions starting from 15.6 before 15.8.5, 15.9 before 15.9.4, and 15.10 before 15.10.1. An XSS … GitLab 15.8.5 / 15.9.4+ Fix from $1,6002023-04-05 MEDIUM 5.3 CVE-2023-0319 An issue has been discovered in GitLab affecting all versions starting from 13.6 before 15.8.5, all versions starting from 15.9 before 15.9.4, all ve… GitLab 15.8.5 / 15.9.4+ Fix from $1,6002023-04-05 MEDIUM 6.5 CVE-2022-3767 Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, … Dynamic Application Security Testing Analyzer 3.0.32+ Fix from $1,6002023-03-09 MEDIUM 5.4 CVE-2022-3758 An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting from 15.8 before 15.8.4, all ve… GitLab 15.7.8 / 15.8.4+ Fix from $1,6002023-03-09