Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 17.0.8 | 17.0.8 | ||
| 17.0.7 | 17.0.7 | ||
| 17.0.6 | 17.0.6 | ||
| 17.0.5 | 17.0.5 | ||
| 17.0.4 | 17.0.4 | ||
| 17.0.3 | 17.0.3 | ||
| 17.0.2 | 17.0.2 | ||
| 17.0.1 | 17.0.1 | ||
| 17.0.0 | 17.0.0 |
Показывать по
Количество 5 943
CVE-2022-0735
An issue has been discovered in GitLab CE/EE affecting all versions st ...
CVE-2022-0549
An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under certain conditions, GitLab REST API may allow unprivileged users to add other users to groups even if that is not possible to do through the Web UI.
CVE-2022-0549
An issue has been discovered in GitLab CE/EE affecting all versions be ...
CVE-2022-0488
An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trigger a timeout on a page with markdown by using a specific amount of block-quotes.
CVE-2022-0488
An issue has been discovered in GitLab CE/EE affecting all versions st ...
CVE-2022-0427
Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows an attacker to perform arbitrary HTTP POST requests on a user's behalf leading to potential account takeover
CVE-2022-0427
Missing sanitization of HTML attributes in Jupyter notebooks in all ve ...
CVE-2022-0371
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 before 14.5.4, all versions starting from 14.6 before 14.6.4, all versions starting from 14.7 before 14.7.1. GitLab search may allow authenticated users to search other users by their respective private emails even if a user set their email to private.
CVE-2022-0371
An issue has been discovered in GitLab CE/EE affecting all versions st ...
CVE-2022-0344
An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting from 10.1 before 14.6.4, all versions starting from 10.2 before 14.7.1. Private project paths can be disclosed to unauthorized users via system notes when an Issue is closed via a Merge Request and later moved to a public project
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2022-0735 An issue has been discovered in GitLab CE/EE affecting all versions st ... | CVSS3: 10 | 13% Средний | больше 4 лет назад |
 | CVE-2022-0549 An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under certain conditions, GitLab REST API may allow unprivileged users to add other users to groups even if that is not possible to do through the Web UI. | CVSS3: 6.5 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0549 An issue has been discovered in GitLab CE/EE affecting all versions be ... | CVSS3: 6.5 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0488 An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trigger a timeout on a page with markdown by using a specific amount of block-quotes. | CVSS3: 3.5 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0488 An issue has been discovered in GitLab CE/EE affecting all versions st ... | CVSS3: 3.5 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0427 Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows an attacker to perform arbitrary HTTP POST requests on a user's behalf leading to potential account takeover | CVSS3: 7.7 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0427 Missing sanitization of HTML attributes in Jupyter notebooks in all ve ... | CVSS3: 7.7 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0371 An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 before 14.5.4, all versions starting from 14.6 before 14.6.4, all versions starting from 14.7 before 14.7.1. GitLab search may allow authenticated users to search other users by their respective private emails even if a user set their email to private. | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0371 An issue has been discovered in GitLab CE/EE affecting all versions st ... | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0344 An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting from 10.1 before 14.6.4, all versions starting from 10.2 before 14.7.1. Private project paths can be disclosed to unauthorized users via system notes when an Issue is closed via a Merge Request and later moved to a public project | CVSS3: 3.1 | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу