Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 17.0.8 | 17.0.8 | ||
| 17.0.7 | 17.0.7 | ||
| 17.0.6 | 17.0.6 | ||
| 17.0.5 | 17.0.5 | ||
| 17.0.4 | 17.0.4 | ||
| 17.0.3 | 17.0.3 | ||
| 17.0.2 | 17.0.2 | ||
| 17.0.1 | 17.0.1 | ||
| 17.0.0 | 17.0.0 |
Показывать по
Количество 5 943
CVE-2023-3920
An issue has been discovered in GitLab affecting all versions starting ...
CVE-2023-3917
Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attacker to cause pipelines to fail.
CVE-2023-3917
Denial of Service in pipelines affecting all versions of Gitlab EE and ...
CVE-2023-3914
A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal projects. A service account is not deleted when a namespace is deleted, allowing access to internal projects.
CVE-2023-3914
A business logic error in GitLab EE affecting all versions prior to 16 ...
CVE-2023-3906
An input validation issue in the asset proxy in GitLab EE, affecting all versions from 12.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1, allowed an authenticated attacker to craft image urls which bypass the asset proxy.
CVE-2023-3906
An input validation issue in the asset proxy in GitLab EE, affecting a ...
CVE-2023-3115
An issue has been discovered in GitLab EE affecting all versions affecting all versions from 11.11 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Single Sign On restrictions were not correctly enforced for indirect project members accessing public members-only project repositories.
CVE-2023-3115
An issue has been discovered in GitLab EE affecting all versions affec ...
CVE-2023-2233
An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.2.8, all versions starting from 16.3 before 16.3.5 and all versions starting from 16.4 before 16.4.1. It allows a project reporter to leak the owner's Sentry instance projects.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2023-3920 An issue has been discovered in GitLab affecting all versions starting ... | CVSS3: 4.3 | 0% Низкий | почти 3 года назад |
 | CVE-2023-3917 Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attacker to cause pipelines to fail. | CVSS3: 4.3 | 1% Низкий | почти 3 года назад |
| CVE-2023-3917 Denial of Service in pipelines affecting all versions of Gitlab EE and ... | CVSS3: 4.3 | 1% Низкий | почти 3 года назад |
| CVE-2023-3914 A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal projects. A service account is not deleted when a namespace is deleted, allowing access to internal projects. | CVSS3: 5.4 | 0% Низкий | почти 3 года назад |
| CVE-2023-3914 A business logic error in GitLab EE affecting all versions prior to 16 ... | CVSS3: 5.4 | 0% Низкий | почти 3 года назад |
| CVE-2023-3906 An input validation issue in the asset proxy in GitLab EE, affecting all versions from 12.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1, allowed an authenticated attacker to craft image urls which bypass the asset proxy. | CVSS3: 3.5 | 0% Низкий | почти 3 года назад |
| CVE-2023-3906 An input validation issue in the asset proxy in GitLab EE, affecting a ... | CVSS3: 3.5 | 0% Низкий | почти 3 года назад |
| CVE-2023-3115 An issue has been discovered in GitLab EE affecting all versions affecting all versions from 11.11 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Single Sign On restrictions were not correctly enforced for indirect project members accessing public members-only project repositories. | CVSS3: 5.4 | 0% Низкий | почти 3 года назад |
| CVE-2023-3115 An issue has been discovered in GitLab EE affecting all versions affec ... | CVSS3: 5.4 | 0% Низкий | почти 3 года назад |
| CVE-2023-2233 An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.2.8, all versions starting from 16.3 before 16.3.5 and all versions starting from 16.4 before 16.4.1. It allows a project reporter to leak the owner's Sentry instance projects. | CVSS3: 3.1 | 0% Низкий | почти 3 года назад |
Уязвимостей на страницу