Skip to content
OpenAdvisories
Medium WID-SEC-2023-0233 7 CVEs

GitLab: Mehrere Schwachstellen

Published Jan 31, 2023 · Updated Feb 22, 2023 · Revision 2 · de-DE

Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Denial of Service Angriff durchzuführen oder Dateien zu manipulieren.

Product

GitLab ist eine Webanwendung zur Versionsverwaltung für Softwareprojekte auf Basis von git.

Vulnerabilities 7

  • Medium 6.5
    CVE-2022-3411

    A lack of length validation in GitLab CE/EE affecting all versions from 12.4 before 15.6.7, 15.7 before 15.7.6, and 15.…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 6.4
    CVE-2022-4138

    A Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions before 15.6.7, all versio…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 4.3
    CVE-2022-3759

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 15.6.7, all versions star…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 4.3
    CVE-2023-0518

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions star…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Unscored —
    CVE-2023-0884 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-3759. Reason: This candidate is a reservation duplicate of CVE-2…

  • Unscored —
    CVE-2023-0885 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-0518. Reason: This candidate is a reservation duplicate of CVE-2…

  • Unscored —
    CVE-2023-0886 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-3411. Reason: This candidate is a reservation duplicate of CVE-2…

Revision history

  1. #2

    Neue CVE's hinzugefügt

  2. #1

    Initiale Fassung

References