Skip to content
OpenAdvisories
Medium WID-SEC-2023-1130 12 CVEs

GitLab: Mehrere Schwachstellen

Published May 2, 2023 · Updated May 4, 2023 · Revision 2 · de-DE

Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um seine Privilegien zu erweitern, Sicherheitsvorkehrungen zu umgehen, einen Cross Site Scripting Angriff durchzuführen und Informationen offenzulegen

Product

GitLab ist eine Webanwendung zur Versionsverwaltung für Softwareprojekte auf Basis von git.

Vulnerabilities 12

  • High 7.5
    CVE-2023-0464 Public exploit

    Excessive Resource Usage Verifying X.509 Policy Constraints

    A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate …

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 6.8
    CVE-2023-1965

    An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions startin…

    GitLab GitLab Web / CMS
  • Medium 6.8
    CVE-2023-2182

    An issue has been discovered in GitLab EE affecting all versions starting from 15.10 before 15.10.5, all versions start…

    GitLab GitLab Web / CMS
  • Medium 6.5
    CVE-2023-1621

    An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.5, all versions starti…

    GitLab GitLab Web / CMS
  • Medium 6.4
    CVE-2023-2069

    An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting f…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 6.2
    CVE-2023-1410

    Stored XSS in Graphite FunctionDescription tooltip

    Grafana is an open-source platform for monitoring and observability.  Grafana had a stored XSS vulnerability in the Graphite FunctionDescription tooltip. The stored XSS vulnerability was possible due the value of the Function Description was not properly sani…

    Grafana Grafana Grafana Enterprise grafana Web / CMS Ubuntu Go
  • Medium 5.7
    CVE-2023-1178

    An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all versions starting from …

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.4
    CVE-2023-1265

    An issue has been discovered in GitLab affecting all versions starting from 11.9 before 15.9.6, all versions starting f…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 4.9
    CVE-2023-0805

    An issue has been discovered in GitLab EE affecting all versions starting from 15.2 before 15.9.6, all versions startin…

    GitLab GitLab Web / CMS
  • Medium 4.8
    CVE-2023-0756

    An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 4.4
    CVE-2023-1836

    A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 15.9.6, all …

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Low 3.1
    CVE-2022-4376

    An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15…

    GitLab GitLab gitlab Web / CMS Ubuntu

Revision history

  1. #2

    CVE ergänzt

  2. #1

    Initiale Fassung

References