Summary
Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.
Product
GitLab ist eine Webanwendung zur Versionsverwaltung für Softwareprojekte auf Basis von git.
Vulnerabilities 18
-
Medium 6.5
An issue has been discovered in GitLab affecting all versions starting from 13.11 before 15.8.5, all versions starting …
-
Medium 6.4
An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4…
-
Medium 6.1
An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.8.5, all versions starting f…
-
Medium 5.8
An issue has been discovered in GitLab affecting all versions starting from 13.6 before 15.8.5, all versions starting f…
-
Medium 5.8
An information disclosure vulnerability has been discovered in GitLab EE/CE affecting all versions starting from 11.5 b…
-
Medium 5.8
A denial of service condition exists in the Prometheus server bundled with GitLab affecting all versions from 11.10 to …
-
Medium 5.7
An issue was identified in GitLab CE/EE affecting all versions from 1.0 prior to 15.8.5, 15.9 prior to 15.9.4, and 15.1…
-
Medium 5.5
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.1 before 15.5.7, all versions star…
-
Medium 5.5
An issue has been discovered in GitLab affecting versions starting from 15.1 before 15.8.5, 15.9 before 15.9.4, and 15.…
-
Medium 5.4
An issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10.1. Open redirects was …
-
Medium 5.4
An issue has been discovered in GitLab affecting all versions starting from 15.6 before 15.8.5, 15.9 before 15.9.4, and…
-
Medium 5.3
Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 b…
-
Medium 5.3
A sensitive information disclosure vulnerability in GitLab affecting all versions from 15.0 prior to 15.8.5, 15.9 prior…
-
Medium 4.3
An issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting f…
-
Medium 4.3
An issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting f…
-
Low 3.7
An issue has been discovered in GitLab affecting all versions starting from 8.1 to 15.8.5, and from 15.9 to 15.9.4, and…
-
Low 3.1
An issue has been discovered in GitLab affecting all versions starting from 11.10 before 15.8.5, all versions starting …
-
Low 3.1
An issue has been discovered in GitLab affecting all versions from 15.5 before 15.8.5, all versions starting from 15.9 …
Revision history
-
#3
CVE's ergänzt
-
#2
CVE ergänzt
-
#1
Initiale Fassung
References
-
GitLab Security Release: 15.10.1, 15.9.4, and 15.8.5 vom 2023-03-30
https://about.gitlab.com/releases/2023/03/30/security-release-gitlab-15-10-1-released/