Browse CVEs

HIGH 7.5 CVE-2022-2498 An issue in pipeline subscriptions in GitLab EE affecting all versions from 12.8 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 trig… GitLab 15.0.5 / 15.1.4+ Fix from $1,9502022-08-05 HIGH 7.5 CVE-2022-2501 An improper access control issue in GitLab EE affecting all versions from 12.0 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows… GitLab 15.0.5 / 15.1.4+ Fix from $1,9502022-08-05 MEDIUM 6.5 CVE-2022-2512 An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, … GitLab 15.0.5 / 15.1.4+ Fix from $1,6002022-08-05 MEDIUM 6.4 CVE-2022-2497 An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.0.5, all versions starting from 15.1 before 15.1.4, … GitLab 15.0.5 / 15.1.4+ Fix from $1,6002022-08-05 MEDIUM 5.4 CVE-2022-2500 A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1… GitLab 15.0.5 / 15.1.4+ Fix from $1,6002022-08-05 MEDIUM 5.3 CVE-2022-2531 An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions starting from 15.1 before 15.1.4, all… GitLab 15.0.5 / 15.1.4+ Fix from $1,6002022-08-05 MEDIUM 5.3 CVE-2022-2534 An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions starting from 15.1 before 15.1.4, a… GitLab 15.0.5 / 15.1.4+ Fix from $1,6002022-08-05 MEDIUM 5.3 CVE-2022-2539 An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.… GitLab 15.0.5 / 15.1.4+ Fix from $1,6002022-08-05 HIGH 8.1 CVE-2022-2326 An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starti… GitLab 15.0.5 / 15.1.4+ Fix from $1,9502022-08-05 MEDIUM 5.4 CVE-2022-1948 An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1. Missing validation of input used in quick actions all… GitLab Mitigation only Fix from $1,6002022-07-28 MEDIUM 6.1 CVE-2022-0167 An issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all … GitLab 14.4.5 / 14.5.3+ Fix from $1,6002022-07-01 MEDIUM 5.3 CVE-2022-1954 A Regular Expression Denial of Service vulnerability in GitLab CE/EE affecting all versions from 1.0.2 prior to 14.10.5, 15.0 prior to 15.0.4, and 15… GitLab 14.10.5 / 15.0.4+ Fix from $1,6002022-07-01 HIGH 7.5 CVE-2022-2229 An improper authorization issue in GitLab CE/EE affecting all versions from 13.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 all… GitLab 14.10.5 / 15.0.4+ Fix from $1,9502022-07-01 MEDIUM 6.5 CVE-2022-2228 Information exposure in GitLab EE affecting all versions from 12.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacke… GitLab 14.10.5 / 15.0.4+ Fix from $1,6002022-07-01 MEDIUM 5.3 CVE-2022-1963 An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 14.10.5, all versions starting from 15.0 before 15.0.4,… GitLab 14.10.5 / 15.0.4+ Fix from $1,6002022-07-01 MEDIUM 5.3 CVE-2022-1999 An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1. Under… GitLab 14.10.5 / 15.0.4+ Fix from $1,6002022-07-01 MEDIUM 5.3 CVE-2022-2270 An issue has been discovered in GitLab affecting all versions starting from 12.4 before 14.10.5, all versions starting from 15.0 before 15.0.4, all v… GitLab 14.10.5 / 15.0.4+ Fix from $1,6002022-07-01 HIGH 8.8 CVE-2022-2185EPSS 77% A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15… GitLab 14.10.5 / 15.0.4+ Fix from $1,9502022-07-01 MEDIUM 6.1 CVE-2022-2250 An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, all… GitLab 14.0.5 / 14.10.5+ Fix from $1,6002022-07-01 MEDIUM 5.4 CVE-2022-2235 Insufficient sanitization in GitLab EE's external issue tracker affecting all versions from 14.5 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 pri… GitLab 14.10.5 / 15.0.4+ Fix from $1,6002022-07-01 MEDIUM 5.3 CVE-2022-2281 An information disclosure vulnerability in GitLab EE affecting all versions from 12.5 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.… GitLab 14.10.5 / 15.0.4+ Fix from $1,6002022-07-01 HIGH 8.8 CVE-2022-1680EPSS 15% An account takeover issue has been discovered in GitLab EE affecting all versions starting from 11.10 before 14.9.5, all versions starting from 14.10… GitLab 14.9.5 / 14.10.4+ Fix from $1,9502022-06-06 HIGH 7.1 CVE-2022-1944 When the feature is configured, improper authorization in the Interactive Web Terminal in GitLab CE/EE affecting all versions from 11.3 prior to 14.9… GitLab 14.9.5 / 14.10.4+ Fix from $1,9502022-06-06 MEDIUM 6.5 CVE-2022-1935 Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions st… GitLab 14.9.5 / 14.10.4+ Fix from $1,6002022-06-06 MEDIUM 6.5 CVE-2022-1936 Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions st… GitLab 14.9.5 / 14.10.4+ Fix from $1,6002022-06-06 MEDIUM 5.4 CVE-2022-1940EPSS 6% A Stored Cross-Site Scripting vulnerability in Jira integration in GitLab EE affecting all versions from 13.11 prior to 14.9.5, 14.10 prior to 14.10.… GitLab 14.9.5 / 14.10.4+ Fix from $1,6002022-06-06 HIGH 7.5 CVE-2021-39947 In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2 would re-use the file descri… Gitlab Runner 14.3.4 / 14.4.2+ Fix from $1,9502022-06-06 HIGH 8.8 CVE-2022-1423 Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9… GitLab 14.8.6 / 14.9.4+ Fix from $1,9502022-05-19 HIGH 7.5 CVE-2022-1413 Missing input masking in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versi… GitLab 14.8.6 / 14.9.4+ Fix from $1,9502022-05-19 MEDIUM 5.4 CVE-2022-1416 Missing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 1… GitLab 14.8.6 / 14.9.4+ Fix from $1,6002022-05-19