Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 17.0.8 | 17.0.8 | ||
| 17.0.7 | 17.0.7 | ||
| 17.0.6 | 17.0.6 | ||
| 17.0.5 | 17.0.5 | ||
| 17.0.4 | 17.0.4 | ||
| 17.0.3 | 17.0.3 | ||
| 17.0.2 | 17.0.2 | ||
| 17.0.1 | 17.0.1 | ||
| 17.0.0 | 17.0.0 |
Показывать по
Количество 5 943
CVE-2024-4011
An issue was discovered in GitLab CE/EE affecting all versions startin ...
CVE-2024-3959
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows private job artifacts can be accessed by any user.
CVE-2024-3959
An issue was discovered in GitLab CE/EE affecting all versions startin ...
CVE-2024-3115
An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to access issues and epics without having an SSO session using Duo Chat.
CVE-2024-3115
An issue was discovered in GitLab EE affecting all versions starting f ...
CVE-2024-2191
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows merge request title to be visible publicly despite being set as project members only.
CVE-2024-2191
An issue was discovered in GitLab CE/EE affecting all versions startin ...
CVE-2024-1816
An issue was discovered in GitLab CE/EE affecting all versions starting from 12.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows for an attacker to cause a denial of service using a crafted OpenAPI file.
CVE-2024-1816
An issue was discovered in GitLab CE/EE affecting all versions startin ...
CVE-2024-1493
An issue was discovered in GitLab CE/EE affecting all versions starting from 9.2 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, with the processing logic for generating link in dependency files can lead to a regular expression DoS attack on the server
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2024-4011 An issue was discovered in GitLab CE/EE affecting all versions startin ... | CVSS3: 3.1 | 0% Низкий | около 2 лет назад |
 | CVE-2024-3959 An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows private job artifacts can be accessed by any user. | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
| CVE-2024-3959 An issue was discovered in GitLab CE/EE affecting all versions startin ... | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
| CVE-2024-3115 An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to access issues and epics without having an SSO session using Duo Chat. | CVSS3: 4.3 | 0% Низкий | около 2 лет назад |
| CVE-2024-3115 An issue was discovered in GitLab EE affecting all versions starting f ... | CVSS3: 4.3 | 0% Низкий | около 2 лет назад |
| CVE-2024-2191 An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows merge request title to be visible publicly despite being set as project members only. | CVSS3: 5.3 | 0% Низкий | около 2 лет назад |
| CVE-2024-2191 An issue was discovered in GitLab CE/EE affecting all versions startin ... | CVSS3: 5.3 | 0% Низкий | около 2 лет назад |
| CVE-2024-1816 An issue was discovered in GitLab CE/EE affecting all versions starting from 12.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows for an attacker to cause a denial of service using a crafted OpenAPI file. | CVSS3: 5.3 | 0% Низкий | около 2 лет назад |
| CVE-2024-1816 An issue was discovered in GitLab CE/EE affecting all versions startin ... | CVSS3: 5.3 | 0% Низкий | около 2 лет назад |
| CVE-2024-1493 An issue was discovered in GitLab CE/EE affecting all versions starting from 9.2 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, with the processing logic for generating link in dependency files can lead to a regular expression DoS attack on the server | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
Уязвимостей на страницу