Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service zu verursachen.
Product
GitLab ist eine Webanwendung zur Versionsverwaltung für Softwareprojekte auf Basis von git.
Vulnerabilities 19
-
Medium 6.8
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions star…
KEV Feb 3, 2026 -
High 7.1
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions star…
-
Medium 5.9
A collision in access memoization logic in all versions of GitLab CE/EE before 14.3.6, all versions starting from 14.4 …
-
Medium 5.3
Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all…
-
Medium 4.4
In all versions of GitLab CE/EE starting version 14.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all…
-
Medium 4.3
Lack of an access control check in the External Status Check feature allowed any authenticated user to retrieve the con…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14.3.6, all versions star…
-
Medium 4.3
Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and …
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions star…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.3.6, all versions sta…
-
Medium 4.3
Improper access control allows any project member to retrieve the service desk email address in GitLab CE/EE versions s…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 before 14.3.6, all versions star…
-
Low 3.7
An information disclosure vulnerability in GitLab CE/EE versions 12.0 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 all…
-
Low 3.5
Improper access control in GitLab CE/EE affecting all versions starting from 10.7 before 14.3.6, all versions starting …
-
Low 3.1
Incorrect Authorization in GitLab EE affecting all versions starting from 11.1 before 14.3.6, all versions starting fro…
-
Low 3.1
An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11 before 14.3.6, all versions star…
-
Low 3.1
A vulnerable regular expression pattern in GitLab CE/EE since version 8.15 before 14.3.6, all versions starting from 14…
-
Low 2.7
Improper access control in the GitLab CE/EE API affecting all versions starting from 9.4 before 14.3.6, all versions st…
-
Low 2.6
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 14.3.6, all versions star…
Revision history
-
#3
Aktive Ausnutzung gemeldet
-
#2
Neue Updates von Arch Linux aufgenommen
-
#1
Initiale Fassung
References
-
GitLab Security Release: 14.5.2, 14.4.4, and 14.3.6 vom 2021-12-06
https://about.gitlab.com/releases/2021/12/06/security-release-gitlab-14-5-2-released/
-
Arch Linux Security Advisory ASA-202112-10 vom 2021-12-11
https://security.archlinux.org/ASA-202112-10
-
CISA Known Exploited Vulnerabilities Catalog vom 2026-02-03
https://www.cisa.gov/news-events/alerts/2026/02/03/cisa-adds-four-known-exploited-vulnerabilities-catalog