Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 17.0.8 | 17.0.8 | ||
| 17.0.7 | 17.0.7 | ||
| 17.0.6 | 17.0.6 | ||
| 17.0.5 | 17.0.5 | ||
| 17.0.4 | 17.0.4 | ||
| 17.0.3 | 17.0.3 | ||
| 17.0.2 | 17.0.2 | ||
| 17.0.1 | 17.0.1 | ||
| 17.0.0 | 17.0.0 |
Показывать по
Количество 5 943
GHSA-rhvj-gv4v-wvcv
An issue was discovered in GitLab Enterprise Edition before 11.7.11, 11.8.x before 11.8.7, and 11.9.x before 11.9.7. It allows Information Disclosure.
GHSA-9r89-5vm4-vcr8
GitLab Community and Enterprise Edition 8.9 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 has Incorrect Access Control.
GHSA-6gjc-rr77-h8h6
GitLab CE & EE 11.2 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 have Persistent XSS.
GHSA-j365-62px-vjjv
Jenkins GitLab Plugin Cross-Site Request Forgery vulnerability
GHSA-923w-9p3x-hmgw
Jenkins GitLab Plugin missing permission checks
GHSA-2f58-3p8j-4mx4
Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 allows a malicious actor with Developer privileges to perform cache poisoning leading to arbitrary code execution in protected branches
GHSA-2h7w-85g4-9cx4
Missing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 allows for rendering of attacker controlled HTML tags and CSS styling
GHSA-chvg-47qc-prxj
Missing input masking in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 causes potentially sensitive integration properties to be disclosed in the web interface
CVE-2022-1423
Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 allows a malicious actor with Developer privileges to perform cache poisoning leading to arbitrary code execution in protected branches
CVE-2022-1423
Improper access control in the CI/CD cache mechanism in GitLab CE/EE a ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-rhvj-gv4v-wvcv An issue was discovered in GitLab Enterprise Edition before 11.7.11, 11.8.x before 11.8.7, and 11.9.x before 11.9.7. It allows Information Disclosure. | CVSS3: 6.5 | 2% Низкий | около 4 лет назад |
| GHSA-9r89-5vm4-vcr8 GitLab Community and Enterprise Edition 8.9 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 has Incorrect Access Control. | CVSS3: 8.8 | 2% Низкий | около 4 лет назад |
| GHSA-6gjc-rr77-h8h6 GitLab CE & EE 11.2 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 have Persistent XSS. | CVSS3: 6.1 | 1% Низкий | около 4 лет назад |
| GHSA-j365-62px-vjjv Jenkins GitLab Plugin Cross-Site Request Forgery vulnerability | CVSS3: 8 | 1% Низкий | около 4 лет назад |
| GHSA-923w-9p3x-hmgw Jenkins GitLab Plugin missing permission checks | CVSS3: 8.8 | 1% Низкий | около 4 лет назад |
| GHSA-2f58-3p8j-4mx4 Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 allows a malicious actor with Developer privileges to perform cache poisoning leading to arbitrary code execution in protected branches | CVSS3: 8.8 | 1% Низкий | около 4 лет назад |
| GHSA-2h7w-85g4-9cx4 Missing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 allows for rendering of attacker controlled HTML tags and CSS styling | CVSS3: 5.4 | 1% Низкий | около 4 лет назад |
| GHSA-chvg-47qc-prxj Missing input masking in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 causes potentially sensitive integration properties to be disclosed in the web interface | CVSS3: 7.5 | 1% Низкий | около 4 лет назад |
 | CVE-2022-1423 Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 allows a malicious actor with Developer privileges to perform cache poisoning leading to arbitrary code execution in protected branches | CVSS3: 7.1 | 1% Низкий | около 4 лет назад |
| CVE-2022-1423 Improper access control in the CI/CD cache mechanism in GitLab CE/EE a ... | CVSS3: 7.1 | 1% Низкий | около 4 лет назад |
Уязвимостей на страницу