Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 17.0.8 | 17.0.8 | ||
| 17.0.7 | 17.0.7 | ||
| 17.0.6 | 17.0.6 | ||
| 17.0.5 | 17.0.5 | ||
| 17.0.4 | 17.0.4 | ||
| 17.0.3 | 17.0.3 | ||
| 17.0.2 | 17.0.2 | ||
| 17.0.1 | 17.0.1 | ||
| 17.0.0 | 17.0.0 |
Показывать по
Количество 5 871
CVE-2022-0283
An issue has been discovered affecting GitLab versions prior to 13.5. ...
CVE-2022-0249
A vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a blind SSRF attack since requests to shared address space were not blocked.
CVE-2022-0249
A vulnerability was discovered in GitLab starting with version 12. Git ...
CVE-2022-0136
A vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1. GitLab was vulnerable to a blind SSRF attack through the Project Import feature.
CVE-2022-0136
A vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 ...
CVE-2022-0123
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab does not validate SSL certificates for some of external CI services which makes it possible to perform MitM attacks on connections to these external services.
CVE-2022-0123
An issue has been discovered affecting GitLab versions prior to 14.4.5 ...
CVE-2021-4191
An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Private GitLab instances with restricted sign-ups may be vulnerable to user enumeration to unauthenticated users through the GraphQL API.
CVE-2021-4191
An issue has been discovered in GitLab CE/EE affecting versions 13.0 t ...
CVE-2021-39876
In all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee discloses the members of private groups.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2022-0283 An issue has been discovered affecting GitLab versions prior to 13.5. ... | CVSS3: 4.7 | 1% Низкий | больше 4 лет назад |
 | CVE-2022-0249 A vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a blind SSRF attack since requests to shared address space were not blocked. | CVSS3: 3.1 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0249 A vulnerability was discovered in GitLab starting with version 12. Git ... | CVSS3: 3.1 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0136 A vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1. GitLab was vulnerable to a blind SSRF attack through the Project Import feature. | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0136 A vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 ... | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0123 An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab does not validate SSL certificates for some of external CI services which makes it possible to perform MitM attacks on connections to these external services. | CVSS3: 5.9 | 0% Низкий | больше 4 лет назад |
| CVE-2022-0123 An issue has been discovered affecting GitLab versions prior to 14.4.5 ... | CVSS3: 5.9 | 0% Низкий | больше 4 лет назад |
| CVE-2021-4191 An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Private GitLab instances with restricted sign-ups may be vulnerable to user enumeration to unauthenticated users through the GraphQL API. | CVSS3: 5.3 | 80% Высокий | больше 4 лет назад |
| CVE-2021-4191 An issue has been discovered in GitLab CE/EE affecting versions 13.0 t ... | CVSS3: 5.3 | 80% Высокий | больше 4 лет назад |
| CVE-2021-39876 In all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee discloses the members of private groups. | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу