Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 17.0.8 | 17.0.8 | ||
| 17.0.7 | 17.0.7 | ||
| 17.0.6 | 17.0.6 | ||
| 17.0.5 | 17.0.5 | ||
| 17.0.4 | 17.0.4 | ||
| 17.0.3 | 17.0.3 | ||
| 17.0.2 | 17.0.2 | ||
| 17.0.1 | 17.0.1 | ||
| 17.0.0 | 17.0.0 |
Показывать по
Количество 5 943
CVE-2024-7060
An information disclosure vulnerability in GitLab CE/EE in project/gro ...
CVE-2024-5067
An issue was discovered in GitLab EE affecting all versions starting from 16.11 prior to 17.0.5, starting from 17.1 prior to 17.1.3, and starting from 17.2 prior to 17.2.1 where certain project-level analytics settings could be leaked in DOM to group members with Developer or higher roles.
CVE-2024-5067
An issue was discovered in GitLab EE affecting all versions starting f ...
CVE-2024-0231
A resource misdirection vulnerability in GitLab CE/EE versions 12.0 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows an attacker to craft a repository import in such a way as to misdirect commits.
CVE-2024-0231
A resource misdirection vulnerability in GitLab CE/EE versions 12.0 pr ...
CVE-2024-0231
A resource misdirection vulnerability in GitLab CE/EE versions 12.0 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows an attacker to craft a repository import in such a way as to misdirect commits.
BDU:2024-05761
Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю выполнить произвольный код
GHSA-5qwh-g35c-5mmm
An issue was discovered in GitLab CE/EE affecting all versions starting from 11.8 prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2 where it was possible to upload an NPM package with conflicting package data.
CVE-2024-6595
An issue was discovered in GitLab CE/EE affecting all versions starting from 11.8 prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2 where it was possible to upload an NPM package with conflicting package data.
CVE-2024-6595
An issue was discovered in GitLab CE/EE affecting all versions startin ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2024-7060 An information disclosure vulnerability in GitLab CE/EE in project/gro ... | CVSS3: 2.6 | 0% Низкий | около 2 лет назад |
 | CVE-2024-5067 An issue was discovered in GitLab EE affecting all versions starting from 16.11 prior to 17.0.5, starting from 17.1 prior to 17.1.3, and starting from 17.2 prior to 17.2.1 where certain project-level analytics settings could be leaked in DOM to group members with Developer or higher roles. | CVSS3: 4.4 | 1% Низкий | около 2 лет назад |
| CVE-2024-5067 An issue was discovered in GitLab EE affecting all versions starting f ... | CVSS3: 4.4 | 1% Низкий | около 2 лет назад |
| CVE-2024-0231 A resource misdirection vulnerability in GitLab CE/EE versions 12.0 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows an attacker to craft a repository import in such a way as to misdirect commits. | CVSS3: 2.7 | 0% Низкий | около 2 лет назад |
| CVE-2024-0231 A resource misdirection vulnerability in GitLab CE/EE versions 12.0 pr ... | CVSS3: 2.7 | 0% Низкий | около 2 лет назад |
 | CVE-2024-0231 A resource misdirection vulnerability in GitLab CE/EE versions 12.0 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows an attacker to craft a repository import in such a way as to misdirect commits. | CVSS3: 2.7 | 0% Низкий | около 2 лет назад |
 | BDU:2024-05761 Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю выполнить произвольный код | CVSS3: 7.7 | 0% Низкий | около 2 лет назад |
| GHSA-5qwh-g35c-5mmm An issue was discovered in GitLab CE/EE affecting all versions starting from 11.8 prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2 where it was possible to upload an NPM package with conflicting package data. | CVSS3: 3 | 0% Низкий | около 2 лет назад |
| CVE-2024-6595 An issue was discovered in GitLab CE/EE affecting all versions starting from 11.8 prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2 where it was possible to upload an NPM package with conflicting package data. | CVSS3: 3 | 0% Низкий | около 2 лет назад |
| CVE-2024-6595 An issue was discovered in GitLab CE/EE affecting all versions startin ... | CVSS3: 3 | 0% Низкий | около 2 лет назад |
Уязвимостей на страницу