Логотип exploitDog
product: "gitlab"
Консоль
Логотип exploitDog

exploitDog

product: "gitlab"
Gitlab

Gitlabвеб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.

Релизный цикл, информация об уязвимостях

Продукт: Gitlab
Вендор: gitlab

График релизов

18.118.218.320252026

Недавние уязвимости Gitlab

Количество 5 027

debian логотип

CVE-2025-5819

около 1 месяца назад

An issue has been discovered in GitLab CE/EE affecting all versions fr ...

CVSS3: 5
EPSS: Низкий
nvd логотип

CVE-2025-2937

около 1 месяца назад

An issue has been discovered in GitLab CE/EE affecting all versions from 13.2 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to create a denial of service condition by sending specially crafted markdown payloads to the Wiki feature.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2025-2937

около 1 месяца назад

An issue has been discovered in GitLab CE/EE affecting all versions fr ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2025-2614

около 1 месяца назад

An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed an authenticated user to cause a denial of service condition by creating specially crafted content that consumes excessive server resources when processed.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2025-2614

около 1 месяца назад

An issue has been discovered in GitLab CE/EE affecting all versions fr ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2025-2498

около 1 месяца назад

An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain conditions could have allowed users to view assigned issues from restricted groups by bypassing IP restrictions.

CVSS3: 3.1
EPSS: Низкий
debian логотип

CVE-2025-2498

около 1 месяца назад

An improper access control in Gitlab EE affecting all versions from 12 ...

CVSS3: 3.1
EPSS: Низкий
nvd логотип

CVE-2025-1477

около 1 месяца назад

An issue has been discovered in GitLab CE/EE affecting all versions from 8.14 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed an unauthenticated user to create a denial of service condition by sending specially crafted payloads to specific integration API endpoints.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2025-1477

около 1 месяца назад

An issue has been discovered in GitLab CE/EE affecting all versions fr ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2024-12303

около 1 месяца назад

An issue has been discovered in GitLab CE/EE affecting all versions from 17.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have allowed authenticated users with specific roles and permissions to delete issues including confidential ones by inviting users with a specific role.

CVSS3: 6.7
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
debian логотип
CVE-2025-5819

An issue has been discovered in GitLab CE/EE affecting all versions fr ...

CVSS3: 5
0%
Низкий
около 1 месяца назад
nvd логотип
CVE-2025-2937

An issue has been discovered in GitLab CE/EE affecting all versions from 13.2 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to create a denial of service condition by sending specially crafted markdown payloads to the Wiki feature.

CVSS3: 6.5
0%
Низкий
около 1 месяца назад
debian логотип
CVE-2025-2937

An issue has been discovered in GitLab CE/EE affecting all versions fr ...

CVSS3: 6.5
0%
Низкий
около 1 месяца назад
nvd логотип
CVE-2025-2614

An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed an authenticated user to cause a denial of service condition by creating specially crafted content that consumes excessive server resources when processed.

CVSS3: 6.5
0%
Низкий
около 1 месяца назад
debian логотип
CVE-2025-2614

An issue has been discovered in GitLab CE/EE affecting all versions fr ...

CVSS3: 6.5
0%
Низкий
около 1 месяца назад
nvd логотип
CVE-2025-2498

An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain conditions could have allowed users to view assigned issues from restricted groups by bypassing IP restrictions.

CVSS3: 3.1
0%
Низкий
около 1 месяца назад
debian логотип
CVE-2025-2498

An improper access control in Gitlab EE affecting all versions from 12 ...

CVSS3: 3.1
0%
Низкий
около 1 месяца назад
nvd логотип
CVE-2025-1477

An issue has been discovered in GitLab CE/EE affecting all versions from 8.14 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed an unauthenticated user to create a denial of service condition by sending specially crafted payloads to specific integration API endpoints.

CVSS3: 6.5
0%
Низкий
около 1 месяца назад
debian логотип
CVE-2025-1477

An issue has been discovered in GitLab CE/EE affecting all versions fr ...

CVSS3: 6.5
0%
Низкий
около 1 месяца назад
nvd логотип
CVE-2024-12303

An issue has been discovered in GitLab CE/EE affecting all versions from 17.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have allowed authenticated users with specific roles and permissions to delete issues including confidential ones by inviting users with a specific role.

CVSS3: 6.7
0%
Низкий
около 1 месяца назад

Уязвимостей на страницу


Поделиться