Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 17.0.8 | 17.0.8 | ||
| 17.0.7 | 17.0.7 | ||
| 17.0.6 | 17.0.6 | ||
| 17.0.5 | 17.0.5 | ||
| 17.0.4 | 17.0.4 | ||
| 17.0.3 | 17.0.3 | ||
| 17.0.2 | 17.0.2 | ||
| 17.0.1 | 17.0.1 | ||
| 17.0.0 | 17.0.0 |
Показывать по
Количество 5 943
CVE-2023-6680
An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows an attacker to authenticate as another user given their public key if they use Smartcard authentication. Smartcard authentication is an experimental feature and has to be manually enabled by an administrator.
CVE-2023-6680
An improper certificate validation issue in Smartcard authentication i ...
CVE-2023-6051
An issue has been discovered in GitLab CE/EE affecting all versions before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when source code or installation packages are pulled from a specific tag.
CVE-2023-6051
An issue has been discovered in GitLab CE/EE affecting all versions be ...
CVE-2023-5512
An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML encoding is used for file names leading for incorrect representation in the UI.
CVE-2023-5512
An issue has been discovered in GitLab CE/EE affecting all versions fr ...
CVE-2023-5061
An issue has been discovered in GitLab affecting all versions starting from 9.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. In certain situations, it may have been possible for developers to override predefined CI variables via the REST API.
CVE-2023-5061
An issue has been discovered in GitLab affecting all versions starting ...
CVE-2023-3904
An issue has been discovered in GitLab EE affecting all versions starting before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. It was possible to overflow the time spent on an issue that altered the details shown in the issue boards.
CVE-2023-3904
An issue has been discovered in GitLab EE affecting all versions start ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2023-6680 An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows an attacker to authenticate as another user given their public key if they use Smartcard authentication. Smartcard authentication is an experimental feature and has to be manually enabled by an administrator. | CVSS3: 7.4 | 0% Низкий | больше 2 лет назад |
| CVE-2023-6680 An improper certificate validation issue in Smartcard authentication i ... | CVSS3: 7.4 | 0% Низкий | больше 2 лет назад |
| CVE-2023-6051 An issue has been discovered in GitLab CE/EE affecting all versions before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when source code or installation packages are pulled from a specific tag. | CVSS3: 5.7 | 1% Низкий | больше 2 лет назад |
| CVE-2023-6051 An issue has been discovered in GitLab CE/EE affecting all versions be ... | CVSS3: 5.7 | 1% Низкий | больше 2 лет назад |
| CVE-2023-5512 An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML encoding is used for file names leading for incorrect representation in the UI. | CVSS3: 4.8 | 0% Низкий | больше 2 лет назад |
| CVE-2023-5512 An issue has been discovered in GitLab CE/EE affecting all versions fr ... | CVSS3: 4.8 | 0% Низкий | больше 2 лет назад |
| CVE-2023-5061 An issue has been discovered in GitLab affecting all versions starting from 9.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. In certain situations, it may have been possible for developers to override predefined CI variables via the REST API. | CVSS3: 4.3 | 0% Низкий | больше 2 лет назад |
| CVE-2023-5061 An issue has been discovered in GitLab affecting all versions starting ... | CVSS3: 4.3 | 0% Низкий | больше 2 лет назад |
| CVE-2023-3904 An issue has been discovered in GitLab EE affecting all versions starting before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. It was possible to overflow the time spent on an issue that altered the details shown in the issue boards. | CVSS3: 4.3 | 1% Низкий | больше 2 лет назад |
| CVE-2023-3904 An issue has been discovered in GitLab EE affecting all versions start ... | CVSS3: 4.3 | 1% Низкий | больше 2 лет назад |
Уязвимостей на страницу