High WID-SEC-2023-0564 11 CVEs

GitLab: Mehrere Schwachstellen

Published Mar 2, 2023 · Updated Mar 2, 2023 · de-DE

Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder sonstige Auswirkungen zu verursachen.

Product

GitLab ist eine Webanwendung zur Versionsverwaltung für Softwareprojekte auf Basis von git.

Vulnerabilities 11

High 8.7

CVE-2023-0050 EPSS 92%

An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting f…

GitLab GitLab gitlab Web / CMS Ubuntu

Mar 9, 2023
Medium 6.4

CVE-2022-4289

An issue has been discovered in GitLab affecting all versions starting from 15.3 before 15.7.8, versions of 15.8 before…

GitLab GitLab gitlab Web / CMS Ubuntu

Mar 9, 2023
Medium 5.7

CVE-2022-4331

An issue has been discovered in GitLab EE affecting all versions starting from 15.1 before 15.7.8, all versions startin…

GitLab GitLab Web / CMS

Mar 9, 2023
Medium 5.5

CVE-2023-0483

An issue has been discovered in GitLab affecting all versions starting from 12.1 before 15.7.8, all versions starting f…

GitLab GitLab gitlab Web / CMS Ubuntu

Mar 9, 2023
Medium 5.4

CVE-2022-3758

An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting f…

GitLab GitLab gitlab Web / CMS Ubuntu

Mar 9, 2023
Medium 5.4

CVE-2022-4007

A issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8, version 15.8 prior to 15.…

GitLab GitLab gitlab Web / CMS Ubuntu

Mar 8, 2023
Medium 5.3

CVE-2023-0223

An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting f…

GitLab GitLab gitlab Web / CMS Ubuntu

Mar 9, 2023
Medium 5.0

CVE-2022-4462

An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.7.8, all versions starting f…

GitLab GitLab gitlab Web / CMS Ubuntu

Mar 9, 2023
Medium 4.3

CVE-2022-3381

An issue has been discovered in GitLab affecting all versions starting from 10.0 to 15.7.8, 15.8 prior to 15.8.4 and 15…

GitLab GitLab gitlab Web / CMS Ubuntu

Mar 9, 2023
Medium 4.3

CVE-2023-1072

An issue has been discovered in GitLab affecting all versions starting from 9.0 before 15.7.8, all versions starting fr…

GitLab GitLab gitlab Web / CMS Ubuntu

Mar 9, 2023
Low 2.7

CVE-2023-1084

An issue has been discovered in GitLab CE/EE affecting all versions before 15.7.8, all versions starting from 15.8 befo…

GitLab GitLab gitlab Web / CMS Ubuntu

Mar 9, 2023

Revision history

2023-03-02 #1
Initiale Fassung

References

GitLab Security Release: 15.9.2, 15.8.4, and 15.7.8 vom 2023-03-02
https://about.gitlab.com/releases/2023/03/02/security-release-gitlab-15-9-2-released/