Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 17.0.8 | 17.0.8 | ||
| 17.0.7 | 17.0.7 | ||
| 17.0.6 | 17.0.6 | ||
| 17.0.5 | 17.0.5 | ||
| 17.0.4 | 17.0.4 | ||
| 17.0.3 | 17.0.3 | ||
| 17.0.2 | 17.0.2 | ||
| 17.0.1 | 17.0.1 | ||
| 17.0.0 | 17.0.0 |
Показывать по
Количество 5 943
GHSA-xpg3-c2hf-x9vf
A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1 allows a malicious Group Owner to retain a usable Group Access Token even after the Group is deleted, though the APIs usable by that token are limited.
CVE-2022-2539
An issue has been discovered in GitLab CE/EE affecting all versions st ...
CVE-2022-2539
An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1, allowed a project member to filter issues by contact and organization.
CVE-2022-2534
An issue has been discovered in GitLab CE/EE affecting all versions st ...
CVE-2022-2534
An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. GitLab was returning contributor emails due to improper data handling in the Datadog integration.
CVE-2022-2531
An issue has been discovered in GitLab EE affecting all versions start ...
CVE-2022-2531
An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. GitLab was not performing correct authentication on Grafana API under specific conditions allowing unauthenticated users to perform queries through a path traversal vulnerability.
CVE-2022-2512
An issue has been discovered in GitLab CE/EE affecting all versions st ...
CVE-2022-2512
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. Membership changes are not reflected in TODO for confidential notes, allowing a former project members to read updates via TODOs.
CVE-2022-2501
An improper access control issue in GitLab EE affecting all versions f ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-xpg3-c2hf-x9vf A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1 allows a malicious Group Owner to retain a usable Group Access Token even after the Group is deleted, though the APIs usable by that token are limited. | CVSS3: 3.8 | 1% Низкий | около 4 лет назад |
| CVE-2022-2539 An issue has been discovered in GitLab CE/EE affecting all versions st ... | CVSS3: 5.3 | 1% Низкий | около 4 лет назад |
 | CVE-2022-2539 An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1, allowed a project member to filter issues by contact and organization. | CVSS3: 5.3 | 1% Низкий | около 4 лет назад |
| CVE-2022-2534 An issue has been discovered in GitLab CE/EE affecting all versions st ... | CVSS3: 2.2 | 1% Низкий | около 4 лет назад |
| CVE-2022-2534 An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. GitLab was returning contributor emails due to improper data handling in the Datadog integration. | CVSS3: 2.2 | 1% Низкий | около 4 лет назад |
| CVE-2022-2531 An issue has been discovered in GitLab EE affecting all versions start ... | CVSS3: 5.3 | 1% Низкий | около 4 лет назад |
| CVE-2022-2531 An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. GitLab was not performing correct authentication on Grafana API under specific conditions allowing unauthenticated users to perform queries through a path traversal vulnerability. | CVSS3: 5.3 | 1% Низкий | около 4 лет назад |
| CVE-2022-2512 An issue has been discovered in GitLab CE/EE affecting all versions st ... | CVSS3: 6.5 | 1% Низкий | около 4 лет назад |
| CVE-2022-2512 An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. Membership changes are not reflected in TODO for confidential notes, allowing a former project members to read updates via TODOs. | CVSS3: 6.5 | 1% Низкий | около 4 лет назад |
| CVE-2022-2501 An improper access control issue in GitLab EE affecting all versions f ... | CVSS3: 5.9 | 1% Низкий | около 4 лет назад |
Уязвимостей на страницу