Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.

Релизный цикл, информация об уязвимостях

Продукт: Gitlab

Вендор: gitlab

График релизов

Релизные элементы

KB	Версия	Билд	Дата доступности
	17.0.8	17.0.8
	17.0.7	17.0.7
	17.0.6	17.0.6
	17.0.5	17.0.5
	17.0.4	17.0.4
	17.0.3	17.0.3
	17.0.2	17.0.2
	17.0.1	17.0.1
	17.0.0	17.0.0

Показывать по

Недавние уязвимости Gitlab

Количество 5 943

CVE-2023-3210

почти 3 года назад

An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service when importing or cloning malicious content.

CVSS3: 6.5

EPSS: Низкий

CVE-2023-3210

почти 3 года назад

An issue has been discovered in GitLab affecting all versions starting ...

CVSS3: 6.5

EPSS: Низкий

CVE-2023-3205

почти 3 года назад

An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service when importing or cloning malicious content.

CVSS3: 6.5

EPSS: Низкий

CVE-2023-3205

почти 3 года назад

An issue has been discovered in GitLab affecting all versions starting ...

CVSS3: 6.5

EPSS: Низкий

CVE-2023-1555

почти 3 года назад

An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. A namespace-level banned user can access the API.

CVSS3: 2.7

EPSS: Низкий

CVE-2023-1555

почти 3 года назад

An issue has been discovered in GitLab affecting all versions starting ...

CVSS3: 2.7

EPSS: Низкий

CVE-2023-1279

почти 3 года назад

An issue has been discovered in GitLab affecting all versions starting from 4.1 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 where it was possible to create a URL that would redirect to a different project.

CVSS3: 2.6

EPSS: Низкий

CVE-2023-1279

почти 3 года назад

An issue has been discovered in GitLab affecting all versions starting ...

CVSS3: 2.6

EPSS: Низкий

CVE-2023-0120

почти 3 года назад

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. Due to improper permission validation it was possible to edit labels description by an unauthorised user.

CVSS3: 3.5

EPSS: Низкий

CVE-2023-0120

почти 3 года назад

An issue has been discovered in GitLab affecting all versions starting ...

CVSS3: 3.5

EPSS: Низкий

Уязвимостей на страницу

Уязвимость	CVSS	EPSS	Опубликовано 1
CVE-2023-3210 An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service when importing or cloning malicious content.	CVSS3: 6.5	1% Низкий	почти 3 года назад
CVE-2023-3210 An issue has been discovered in GitLab affecting all versions starting ...	CVSS3: 6.5	1% Низкий	почти 3 года назад
CVE-2023-3205 An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service when importing or cloning malicious content.	CVSS3: 6.5	1% Низкий	почти 3 года назад
CVE-2023-3205 An issue has been discovered in GitLab affecting all versions starting ...	CVSS3: 6.5	1% Низкий	почти 3 года назад
CVE-2023-1555 An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. A namespace-level banned user can access the API.	CVSS3: 2.7	0% Низкий	почти 3 года назад
CVE-2023-1555 An issue has been discovered in GitLab affecting all versions starting ...	CVSS3: 2.7	0% Низкий	почти 3 года назад
CVE-2023-1279 An issue has been discovered in GitLab affecting all versions starting from 4.1 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 where it was possible to create a URL that would redirect to a different project.	CVSS3: 2.6	0% Низкий	почти 3 года назад
CVE-2023-1279 An issue has been discovered in GitLab affecting all versions starting ...	CVSS3: 2.6	0% Низкий	почти 3 года назад
CVE-2023-0120 An issue has been discovered in GitLab affecting all versions starting from 10.0 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. Due to improper permission validation it was possible to edit labels description by an unauthorised user.	CVSS3: 3.5	0% Низкий	почти 3 года назад
CVE-2023-0120 An issue has been discovered in GitLab affecting all versions starting ...	CVSS3: 3.5	0% Низкий	почти 3 года назад

Уязвимостей на страницу