Browse CVEs

HIGH 7.3 CVE-2022-4331 An issue has been discovered in GitLab EE affecting all versions starting from 15.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all… GitLab 15.7.8 / 15.8.4+ Fix from $1,9502023-03-09 MEDIUM 5.4 CVE-2023-0050EPSS 92% An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting from 15.8 before 15.8.4, all ve… GitLab 15.7.8 / 15.8.4+ Fix from $1,6002023-03-09 MEDIUM 5.3 CVE-2023-1072 An issue has been discovered in GitLab affecting all versions starting from 9.0 before 15.7.8, all versions starting from 15.8 before 15.8.4, all ver… GitLab 15.7.8 / 15.8.4+ Fix from $1,6002023-03-09 MEDIUM 6.1 CVE-2022-3381 An issue has been discovered in GitLab affecting all versions starting from 10.0 to 15.7.8, 15.8 prior to 15.8.4 and 15.9 prior to 15.9.2. A crafted … GitLab 15.7.8 / 15.8.4+ Fix from $1,6002023-03-09 MEDIUM 5.3 CVE-2023-0223 An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting from 15.8 before 15.8.4, all ve… GitLab 15.7.8 / 15.8.4+ Fix from $1,6002023-03-09 MEDIUM 6.1 CVE-2022-4317 An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in r… Dynamic Application Security Testing Analyzer 3.0.51+ Fix from $1,6002023-03-09 MEDIUM 6.5 CVE-2022-4315 An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with … Dynamic Application Security Testing Analyzer 3.0.55+ Fix from $1,6002023-03-08 MEDIUM 6.1 CVE-2022-4007 A issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8, version 15.8 prior to 15.8.4, and version 15.9 prior to… GitLab 15.7.8 / 15.8.4+ Fix from $1,6002023-03-08 HIGH 8.1 CVE-2022-4138 A Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions before 15.6.7, all versions starting from 15.7 before 1… GitLab 15.6.7 / 15.7.6+ Fix from $1,9502023-02-13 HIGH 7.5 CVE-2022-3759 An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 15.6.7, all versions starting from 15.7 before 15.7.6, … GitLab 15.6.7 / 15.7.6+ Fix from $1,9502023-02-13 HIGH 7.5 CVE-2023-0518 An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, … GitLab 15.6.7 / 15.7.6+ Fix from $1,9502023-02-13 MEDIUM 6.5 CVE-2022-3411 A lack of length validation in GitLab CE/EE affecting all versions from 12.4 before 15.6.7, 15.7 before 15.7.6, and 15.8 before 15.8.1 allows an auth… GitLab 15.6.7 / 15.7.6+ Fix from $1,6002023-02-13 MEDIUM 6.5 CVE-2022-4206 A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization h… Dast Api Scanner 2.0.102+ Fix from $1,6002023-02-01 MEDIUM 5.3 CVE-2022-4255 An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which expose… GitLab 15.4.6 / 15.5.5+ Fix from $1,6002023-01-27 HIGH 7.5 CVE-2022-4205 In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash. GitLab 12.9.8 / 15.5.5+ Fix from $1,9502023-01-27 MEDIUM 5.3 CVE-2022-4201 A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to connect to… GitLab 15.4.6 / 15.5.5+ Fix from $1,6002023-01-27 HIGH 8.0 CVE-2022-4092 An issue has been discovered in GitLab EE affecting all versions starting from 15.6 before 15.6.1. It was possible to create a malicious README page … GitLab No fix yet Fix from $1,9502023-01-26 MEDIUM 5.5 CVE-2022-4054 An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5, all ver… GitLab 15.4.6 / 15.5.5+ Fix from $1,6002023-01-26 MEDIUM 6.4 CVE-2022-3902 An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5, all ver… GitLab 15.4.6 / 15.5.5+ Fix from $1,6002023-01-26 MEDIUM 6.5 CVE-2022-3820 An issue has been discovered in GitLab affecting all versions starting from 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. GitLab was not performing… GitLab 15.4.6 / 15.5.5+ Fix from $1,6002023-01-26 MEDIUM 6.1 CVE-2022-3572 A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions from 13.5 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 pri… GitLab 15.4.6 / 15.5.5+ Fix from $1,6002023-01-26 MEDIUM 5.3 CVE-2022-3482 An improper access control issue in GitLab CE/EE affecting all versions from 11.3 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 all… GitLab 15.4.6 / 15.5.5+ Fix from $1,6002023-01-26 HIGH 8.0 CVE-2022-2251 Improper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows … Runner 15.3.5 / 15.4.4+ Fix from $1,9502023-01-17 MEDIUM 6.5 CVE-2022-2907 An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 15.1.6, all versions starting from 15.2 before 15.2.4, … GitLab 15.1.6 / 15.2.4+ Fix from $1,6002023-01-17 HIGH 7.5 CVE-2022-4167 Incorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2 allows g… GitLab 15.5.7 / 15.6.4+ Fix from $1,9502023-01-12 MEDIUM 6.1 CVE-2023-0042 An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.… GitLab 15.5.7 / 15.6.4+ Fix from $1,6002023-01-12 MEDIUM 5.3 CVE-2022-4131 An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 15.5.7, all versions starting from 15.6 before 15.6.4, … GitLab 15.5.7 / 15.6.4+ Fix from $1,6002023-01-12 HIGH 8.5 CVE-2022-4037 An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starti… GitLab 15.5.7 / 15.6.4+ Fix from $1,9502023-01-12 HIGH 7.5 CVE-2022-3613 An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starti… GitLab 15.5.7 / 15.6.4+ Fix from $1,9502023-01-12 MEDIUM 5.4 CVE-2022-3573 An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.5.7, all versions starting from 15.6 before 15.6.4, … GitLab 15.5.7 / 15.6.4+ Fix from $1,6002023-01-12