Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 17.0.8 | 17.0.8 | ||
| 17.0.7 | 17.0.7 | ||
| 17.0.6 | 17.0.6 | ||
| 17.0.5 | 17.0.5 | ||
| 17.0.4 | 17.0.4 | ||
| 17.0.3 | 17.0.3 | ||
| 17.0.2 | 17.0.2 | ||
| 17.0.1 | 17.0.1 | ||
| 17.0.0 | 17.0.0 |
Показывать по
Количество 5 943
GHSA-cf86-5cg9-6496
An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions starting from 13.0 before 13.0.1. A user could use an unverified email as a public email and commit email by sending a specifically crafted request on user update settings.
CVE-2023-2069
An issue has been discovered in GitLab affecting all versions starting ...
CVE-2023-2069
An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions starting from 13.0 before 13.0.1. A user with the role of developer could use the import project feature to leak CI/CD variables.
CVE-2023-1965
An issue has been discovered in GitLab EE affecting all versions start ...
CVE-2023-1965
An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Lack of verification on RelayState parameter allowed a maliciously crafted URL to obtain access tokens granted for 3rd party Group SAML SSO logins. This feature isn't enabled by default.
CVE-2023-1836
A cross-site scripting issue has been discovered in GitLab affecting a ...
CVE-2023-1836
A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. When viewing an XML file in a repository in "raw" mode, it can be made to render as HTML if viewed under specific circumstances
CVE-2023-1265
An issue has been discovered in GitLab affecting all versions starting ...
CVE-2023-1265
An issue has been discovered in GitLab affecting all versions starting from 11.9 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. The condition allows for a privileged attacker, under certain conditions, to obtain session tokens from all users of a GitLab instance.
CVE-2023-1204
An issue has been discovered in GitLab CE/EE affecting all versions st ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-cf86-5cg9-6496 An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions starting from 13.0 before 13.0.1. A user could use an unverified email as a public email and commit email by sending a specifically crafted request on user update settings. | 1% Низкий | больше 3 лет назад | |
| CVE-2023-2069 An issue has been discovered in GitLab affecting all versions starting ... | CVSS3: 6.4 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-2069 An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions starting from 13.0 before 13.0.1. A user with the role of developer could use the import project feature to leak CI/CD variables. | CVSS3: 6.4 | 1% Низкий | больше 3 лет назад |
| CVE-2023-1965 An issue has been discovered in GitLab EE affecting all versions start ... | CVSS3: 6.8 | 0% Низкий | больше 3 лет назад |
| CVE-2023-1965 An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Lack of verification on RelayState parameter allowed a maliciously crafted URL to obtain access tokens granted for 3rd party Group SAML SSO logins. This feature isn't enabled by default. | CVSS3: 6.8 | 0% Низкий | больше 3 лет назад |
| CVE-2023-1836 A cross-site scripting issue has been discovered in GitLab affecting a ... | CVSS3: 4.4 | 1% Низкий | больше 3 лет назад |
| CVE-2023-1836 A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. When viewing an XML file in a repository in "raw" mode, it can be made to render as HTML if viewed under specific circumstances | CVSS3: 4.4 | 1% Низкий | больше 3 лет назад |
| CVE-2023-1265 An issue has been discovered in GitLab affecting all versions starting ... | CVSS3: 5.4 | 1% Низкий | больше 3 лет назад |
| CVE-2023-1265 An issue has been discovered in GitLab affecting all versions starting from 11.9 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. The condition allows for a privileged attacker, under certain conditions, to obtain session tokens from all users of a GitLab instance. | CVSS3: 5.4 | 1% Низкий | больше 3 лет назад |
| CVE-2023-1204 An issue has been discovered in GitLab CE/EE affecting all versions st ... | CVSS3: 4.3 | 1% Низкий | больше 3 лет назад |
Уязвимостей на страницу