Логотип exploitDog
product: "gitlab"
Консоль
Логотип exploitDog

exploitDog

product: "gitlab"
Gitlab

Gitlabвеб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.

Релизный цикл, информация об уязвимостях

Продукт: Gitlab
Вендор: gitlab

График релизов

18.618.718.8202520262027

Недавние уязвимости Gitlab

Количество 5 332

debian логотип

CVE-2025-11702

3 месяца назад

GitLab has remediated an issue in EE affecting all versions from 17.1 ...

CVSS3: 8.5
EPSS: Низкий
ubuntu логотип

CVE-2025-11702

3 месяца назад

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects.

CVSS3: 8.5
EPSS: Низкий
github логотип

GHSA-28w7-9227-5wcm

3 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.3, and 18.5 before 18.5.1 that under certain conditions could have allowed authenticated users to gain unauthorized project access by exploiting the access request approval workflow.

CVSS3: 2.7
EPSS: Низкий
github логотип

GHSA-jgp3-92wq-g4pq

3 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions from 10.6 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to trigger unauthorized pipeline executions by manipulating commits.

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-rcvw-fc36-wjhj

3 месяца назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to create a denial of service condition by uploading large files to specific API endpoints.

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-5qhc-78h9-5m5x

3 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions from 17.6.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to execute unauthorized quick actions by including malicious commands in specific descriptions.

CVSS3: 3.7
EPSS: Низкий
github логотип

GHSA-xgjv-46p6-hwgv

3 месяца назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to cause a denial of service condition by sending GraphQL requests with crafted JSON payloads.

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-w2m4-xx67-836j

3 месяца назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to cause a denial of service condition by sending specially crafted payloads.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2025-6601

3 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions fro ...

CVSS3: 2.7
EPSS: Низкий
nvd логотип

CVE-2025-6601

3 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.3, and 18.5 before 18.5.1 that under certain conditions could have allowed authenticated users to gain unauthorized project access by exploiting the access request approval workflow.

CVSS3: 2.7
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
debian логотип
CVE-2025-11702

GitLab has remediated an issue in EE affecting all versions from 17.1 ...

CVSS3: 8.5
0%
Низкий
3 месяца назад
ubuntu логотип
CVE-2025-11702

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects.

CVSS3: 8.5
0%
Низкий
3 месяца назад
github логотип
GHSA-28w7-9227-5wcm

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.3, and 18.5 before 18.5.1 that under certain conditions could have allowed authenticated users to gain unauthorized project access by exploiting the access request approval workflow.

CVSS3: 2.7
0%
Низкий
3 месяца назад
github логотип
GHSA-jgp3-92wq-g4pq

GitLab has remediated an issue in GitLab EE affecting all versions from 10.6 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to trigger unauthorized pipeline executions by manipulating commits.

CVSS3: 6.5
0%
Низкий
3 месяца назад
github логотип
GHSA-rcvw-fc36-wjhj

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to create a denial of service condition by uploading large files to specific API endpoints.

CVSS3: 6.5
0%
Низкий
3 месяца назад
github логотип
GHSA-5qhc-78h9-5m5x

GitLab has remediated an issue in GitLab EE affecting all versions from 17.6.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to execute unauthorized quick actions by including malicious commands in specific descriptions.

CVSS3: 3.7
0%
Низкий
3 месяца назад
github логотип
GHSA-xgjv-46p6-hwgv

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to cause a denial of service condition by sending GraphQL requests with crafted JSON payloads.

CVSS3: 7.5
0%
Низкий
3 месяца назад
github логотип
GHSA-w2m4-xx67-836j

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to cause a denial of service condition by sending specially crafted payloads.

CVSS3: 7.5
0%
Низкий
3 месяца назад
debian логотип
CVE-2025-6601

GitLab has remediated an issue in GitLab EE affecting all versions fro ...

CVSS3: 2.7
0%
Низкий
3 месяца назад
nvd логотип
CVE-2025-6601

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.3, and 18.5 before 18.5.1 that under certain conditions could have allowed authenticated users to gain unauthorized project access by exploiting the access request approval workflow.

CVSS3: 2.7
0%
Низкий
3 месяца назад

Уязвимостей на страницу


Поделиться