Browse CVEs

MEDIUM 5.3 CVE-2022-3514 An issue has been discovered in GitLab CE/EE affecting all versions starting from 6.6 before 15.5.7, all versions starting from 15.6 before 15.6.4, a… GitLab 15.5.7 / 15.6.4+ Fix from $1,6002023-01-12 MEDIUM 5.3 CVE-2022-3870 An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions starting from 15.6 before 15.6.4, … GitLab 15.5.7 / 15.6.4+ Fix from $1,6002023-01-12 CRITICAL 9.0 CVE-2022-3726 Lack of sand-boxing of OpenAPI documents in GitLab CE/EE affecting all versions from 12.6 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15… GitLab 15.3.5 / 15.4.4+ Fix from $2,3002022-11-10 MEDIUM 5.3 CVE-2022-3793 An improper authorization issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allo… GitLab 15.3.5 / 15.4.4+ Fix from $1,6002022-11-10 MEDIUM 5.3 CVE-2022-3818 An uncontrolled resource consumption issue when parsing URLs in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 p… GitLab 15.3.5 / 15.4.4+ Fix from $1,6002022-11-10 HIGH 7.5 CVE-2022-3285 Bypass of healthcheck endpoint allow list affecting all versions from 12.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an … GitLab 15.2.5 / 15.3.4+ Fix from $1,9502022-11-09 MEDIUM 6.1 CVE-2022-3486 An open redirect vulnerability in GitLab EE/CE affecting all versions from 9.3 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2, allow… GitLab 15.3.5 / 15.4.4+ Fix from $1,6002022-11-09 MEDIUM 5.4 CVE-2022-3483 An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 15.3.5, all versions starting from 15.4 before 15.4.4, … GitLab 15.3.5 / 15.4.4+ Fix from $1,6002022-11-09 MEDIUM 6.1 CVE-2022-3280 An open redirect in GitLab CE/EE affecting all versions from 10.1 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker … GitLab 15.3.5 / 15.4.4+ Fix from $1,6002022-11-09 MEDIUM 5.4 CVE-2022-3265EPSS 86% A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5… GitLab 15.3.5 / 15.4.4+ Fix from $1,6002022-11-09 MEDIUM 5.3 CVE-2022-2761 An information disclosure issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allo… GitLab 15.3.5 / 15.4.4+ Fix from $1,6002022-11-09 MEDIUM 5.4 CVE-2022-2904 A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions starting from 15.2 before 15.2.5, all versions starting from … GitLab 15.2.5 / 15.3.4+ Fix from $1,6002022-11-02 CRITICAL 9.8 CVE-2022-2826 An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all … GitLab 12.9.8 / 12.10.7+ Fix from $2,3002022-10-28 HIGH 7.5 CVE-2022-3639 A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 10.8 before 15.1.6, all versions starting from 15.2 before 1… GitLab 15.1.6 / 15.2.4+ Fix from $1,9502022-10-21 HIGH 7.5 CVE-2022-3031 An issue has been discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starti… GitLab 15.1.6 / 15.2.4+ Fix from $1,9502022-10-17 HIGH 7.5 CVE-2022-3283 A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before 15.2.5, all versions starting from 15.3 before 15.3… GitLab 15.2.5 / 15.3.4+ Fix from $1,9502022-10-17 HIGH 7.3 CVE-2022-3060 Improper control of a resource identifier in Error Tracking in GitLab CE/EE affecting all versions from 12.7 allows an authenticated attacker to gene… GitLab after 12.7.0 Fix from $1,9502022-10-17 MEDIUM 6.5 CVE-2022-3067 An issue has been discovered in the Import functionality of GitLab CE/EE affecting all versions starting from 14.4 before 15.2.5, all versions starti… GitLab 15.2.5 / 15.3.4+ Fix from $1,6002022-10-17 MEDIUM 6.5 CVE-2022-3279 An unhandled exception in job log parsing in GitLab CE/EE affecting all versions prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allo… GitLab 15.2.5 / 15.3.4+ Fix from $1,6002022-10-17 MEDIUM 6.5 CVE-2022-3291 Serialization of sensitive data in GitLab EE affecting all versions from 14.9 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 can lea… GitLab 15.2.5 / 15.3.4+ Fix from $1,6002022-10-17 MEDIUM 5.4 CVE-2022-3066 An issue has been discovered in GitLab affecting all versions starting from 10.0 before 15.2.5, all versions starting from 15.3 before 15.3.4, all ve… GitLab 15.2.5 / 15.3.4+ Fix from $1,6002022-10-17 MEDIUM 5.3 CVE-2022-3286 Lack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows a gr… GitLab 15.2.5 / 15.3.4+ Fix from $1,6002022-10-17 CRITICAL 9.9 CVE-2022-2884EPSS 76% A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3.1 allows an an authenticated… GitLab 15.1.5 / 15.2.3+ Fix from $2,3002022-10-17 CRITICAL 9.9 CVE-2022-2992EPSS 86% A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated user to ach… GitLab 15.1.6 / 15.2.4+ Fix from $2,3002022-10-17 HIGH 8.0 CVE-2022-2527 An issue in Incident Timelines has been discovered in GitLab CE/EE affecting all versions starting from 14.9 before 15.1.6, all versions starting fro… GitLab 15.1.6 / 15.2.4+ Fix from $1,9502022-10-17 HIGH 7.5 CVE-2022-2931 A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all… GitLab 15.1.6 / 15.2.4+ Fix from $1,9502022-10-17 HIGH 7.4 CVE-2022-2533 An issue has been discovered in GitLab affecting all versions starting from 12.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all v… GitLab 15.1.6 / 15.2.4+ Fix from $1,9502022-10-17 MEDIUM 6.5 CVE-2022-2455 A business logic issue in the handling of large repositories in all versions of GitLab CE/EE from 10.0 before 15.1.6, all versions starting from 15.2… GitLab 15.1.6 / 15.2.4+ Fix from $1,6002022-10-17 MEDIUM 6.5 CVE-2022-2592 A lack of length validation in Snippet descriptions in GitLab CE/EE affecting all versions prior to 15.1.6, 15.2 prior to 15.2.4 and 15.3 prior to 15… GitLab 15.1.6 / 15.2.4+ Fix from $1,6002022-10-17 HIGH 7.3 CVE-2022-2428 A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions before 15.1.6, 15.2 to 15.2.4, and 15.3 to 15.3.2 allows an attac… GitLab 15.1.6 / 15.2.4+ Fix from $1,9502022-10-17