Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 17.0.8 | 17.0.8 | ||
| 17.0.7 | 17.0.7 | ||
| 17.0.6 | 17.0.6 | ||
| 17.0.5 | 17.0.5 | ||
| 17.0.4 | 17.0.4 | ||
| 17.0.3 | 17.0.3 | ||
| 17.0.2 | 17.0.2 | ||
| 17.0.1 | 17.0.1 | ||
| 17.0.0 | 17.0.0 |
Показывать по
Количество 5 943
CVE-2022-0093
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an expired password to access sensitive information through RSS feeds.
CVE-2022-0093
An issue has been discovered affecting GitLab versions prior to 14.4.5 ...
CVE-2022-0090
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab is configured in a way that it doesn't ignore replacement references with git sub-commands, allowing a malicious user to spoof the contents of their commits in the UI.
CVE-2022-0090
An issue has been discovered affecting GitLab versions prior to 14.4.5 ...
CVE-2021-39946
Improper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed an attacker to exploit XSS by abusing the generation of the HTML code related to emojis
CVE-2021-39946
Improper neutralization of user input in GitLab CE/EE versions 14.3 to ...
CVE-2021-39942
A denial of service vulnerability in GitLab CE/EE affecting all versions starting from 12.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows low-privileged users to bypass file size limits in the NPM package repository to potentially cause denial of service.
CVE-2021-39942
A denial of service vulnerability in GitLab CE/EE affecting all versio ...
CVE-2021-39927
Server side request forgery protections in GitLab CE/EE versions between 8.4 and 14.4.4, between 14.5.0 and 14.5.2, and between 14.6.0 and 14.6.1 would fail to protect against attacks sending requests to localhost on port 80 or 443 if GitLab was configured to run on a port other than 80 or 443
CVE-2021-39927
Server side request forgery protections in GitLab CE/EE versions betwe ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2022-0093 An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an expired password to access sensitive information through RSS feeds. | CVSS3: 3.5 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0093 An issue has been discovered affecting GitLab versions prior to 14.4.5 ... | CVSS3: 3.5 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0090 An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab is configured in a way that it doesn't ignore replacement references with git sub-commands, allowing a malicious user to spoof the contents of their commits in the UI. | CVSS3: 6.5 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0090 An issue has been discovered affecting GitLab versions prior to 14.4.5 ... | CVSS3: 6.5 | 1% Низкий | больше 4 лет назад |
| CVE-2021-39946 Improper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed an attacker to exploit XSS by abusing the generation of the HTML code related to emojis | CVSS3: 8.7 | 1% Низкий | больше 4 лет назад |
| CVE-2021-39946 Improper neutralization of user input in GitLab CE/EE versions 14.3 to ... | CVSS3: 8.7 | 1% Низкий | больше 4 лет назад |
| CVE-2021-39942 A denial of service vulnerability in GitLab CE/EE affecting all versions starting from 12.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows low-privileged users to bypass file size limits in the NPM package repository to potentially cause denial of service. | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| CVE-2021-39942 A denial of service vulnerability in GitLab CE/EE affecting all versio ... | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| CVE-2021-39927 Server side request forgery protections in GitLab CE/EE versions between 8.4 and 14.4.4, between 14.5.0 and 14.5.2, and between 14.6.0 and 14.6.1 would fail to protect against attacks sending requests to localhost on port 80 or 443 if GitLab was configured to run on a port other than 80 or 443 | CVSS3: 3.5 | 1% Низкий | больше 4 лет назад |
| CVE-2021-39927 Server side request forgery protections in GitLab CE/EE versions betwe ... | CVSS3: 3.5 | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу