Skip to contentGitlab vulnerabilities
Newest
- gitlabIncorrect Authorization in GitLabCVE-2023-3509Fix available3.7 Low
- gitlabPrivilege Chaining in GitLabCVE-2024-1250Fix available6.5 Medium
- gitlabIncorrect Authorization in GitLabCVE-2023-6564Fix available6.5 Medium
- gitlabInefficient Regular Expression Complexity in GitLabCVE-2023-6736Fix available6.5 Medium
- gitlabMissing Authorization in GitLabCVE-2023-6840Fix available6.7 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2024-1066Fix available6.5 Medium
- gitlabMissing Authorization in GitLabCVE-2023-5612Public exploitFix available5.3 Medium
- gitlabInefficient Regular Expression Complexity in GitLabCVE-2023-6159Fix available6.5 Medium
- gitlabImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLabCVE-2023-5933Fix available6.4 Medium
- gitlabDirect Request ('Forced Browsing') in GitLabCVE-2024-0456Fix available4.3 Medium
- gitlabImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabCVE-2024-0402Public exploitFix available9.9 Critical
- gitlabImproper Verification of Cryptographic Signature in GitLabCVE-2023-2030Fix available3.5 Low
- gitlabIncorrect Authorization in GitLabCVE-2023-4812Fix available7.6 High
- gitlabIncorrect Authorization in GitLabCVE-2023-5356Fix available7.3 High
- gitlab, gitlab ce/ee +1 moreWeak Password Recovery Mechanism for Forgotten Password in GitLabCVE-2023-7028In KEVPublic exploitFix availableEPSS 94.5%10.0 Critical
- gitlabMissing Authorization in GitLabCVE-2023-6955Fix available6.6 Medium
- gitlabImproper User Management in GitLabCVE-2023-3907Fix available4.9 Medium
- gitlabImproper Validation of Specified Type of Input in GitLabCVE-2023-3904Fix available4.3 Medium
- gitlabMissing Authorization in GitLabCVE-2023-5061Fix available4.3 Medium
- gitlabImproper Control of Generation of Code ('Code Injection') in GitLabCVE-2023-5512Fix available4.8 Medium
- gitlabImproper Control of Generation of Code ('Code Injection') in GitLabCVE-2023-6051Fix available5.7 Medium
- gitlabImproper Certificate Validation in GitLabCVE-2023-6680Fix available7.4 High
- gitlabIncorrect Authorization in GitLabCVE-2023-3511Fix available2.0 Low
- gitlab, hashicorp consul +1 moreDependency on Vulnerable Third-Party Component in GitLabCVE-2023-5332Fix available5.9 Medium
- gitlabIncorrect Authorization in GitLabCVE-2023-3443Fix available3.1 Low
- gitlabIncorrect Authorization in GitLabCVE-2023-3964Fix available4.3 Medium
- gitlabInsertion of Sensitive Information Into Sent Data in GitLabCVE-2023-3949Fix available5.3 Medium
- gitlabIncorrect Authorization in GitLabCVE-2023-4317Fix available4.3 Medium
- gitlabIncorrect Authorization in GitLabCVE-2023-4658Fix available3.1 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2023-4912Fix available2.6 Low
- gitlabImproper Control of Generation of Code ('Code Injection') in GitLabCVE-2023-5226Fix available4.8 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2023-6033Fix available8.7 High
- gitlabIncorrect Authorization in GitLabCVE-2023-5995Fix available4.4 Medium
- gitlabIncorrect Authorization in GitLabCVE-2023-4379Fix available8.1 High
- gitlabMissing Authorization in GitLabCVE-2023-4700Fix available3.5 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2023-5963Fix available3.1 Low
- gitlabInsertion of Sensitive Information Into Sent Data in GitLabCVE-2023-3399Fix available8.5 High
- gitlabInefficient Regular Expression Complexity in GitLabCVE-2023-3909Fix available4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLabCVE-2023-3246Fix available4.3 Medium
- gitlabLoop with Unreachable Exit Condition ('Infinite Loop') in GitLabCVE-2023-5825Fix available6.5 Medium
- gitlabInsertion of Sensitive Information Into Sent Data in GitLabCVE-2023-5831Fix available3.7 Low
- gitlabIncorrect Authorization in GitLabCVE-2023-5106Fix available8.2 High
- gitlabExecution with Unnecessary Privileges in GitLabCVE-2023-5207Fix available8.2 High
- gitlabInsertion of Sensitive Information Into Sent Data in GitLabCVE-2023-3413Fix available6.5 Medium
- gitlabURL Redirection to Untrusted Site ('Open Redirect') in GitLabCVE-2023-3922Fix available3.0 Low
- gitlabIncorrect Authorization in GitLabCVE-2023-5198Fix available4.3 Medium
- gitlabImproper Ownership Management in GitLabCVE-2023-0989Fix available4.3 Medium
- gitlabMissing Authorization in GitLabCVE-2023-2233Fix available3.1 Low
- gitlabIncorrect User Management in GitLabCVE-2023-3115Fix available5.4 Medium
- gitlabIncorrect Authorization in GitLabCVE-2023-3920Fix available4.3 Medium
- Show moreLoading…