Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Количество 5 336
BDU:2025-05161
Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/CE, связанная с некорректной обработкой логических операций, позволяющая нарушителю оказывать воздействие на целостность и конфиденциальность защищаемой информации
BDU:2025-05160
Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/CE, связанная с неограниченным распределением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
GHSA-r375-6xr6-qqjq
An issue has been discovered in GitLab CE/EE affecting all versions from 7.7 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions, an attacker could potentially trick users into unintentionally authorizing sensitive actions on their behalf.
GHSA-6j5x-6p93-f5m6
An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 17.9.6, and 17.10 before 17.10.4. The runtime profiling data of a specific service was accessible to unauthenticated users.
GHSA-3jj9-4wwv-fwwp
An issue has been discovered in GitLab CE/EE affecting all versions from 13.12 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions users could bypass IP access restrictions and view sensitive information.
GHSA-prvg-5h5v-3mxw
A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all up to 17.8.7, 17.9 prior to 17.9.6 and 17.10 prior to 17.10.4 A denial of service could occur upon injecting oversized payloads into CI pipeline exports.
GHSA-9fxr-6qgm-fprg
An issue has been discovered in GitLab EE affecting all versions from 17.1 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. This allows attackers to perform targeted searches with sensitive keywords to get the count of issues containing the searched term."
CVE-2025-0362
An issue has been discovered in GitLab CE/EE affecting all versions from 7.7 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions, an attacker could potentially trick users into unintentionally authorizing sensitive actions on their behalf.
CVE-2025-0362
An issue has been discovered in GitLab CE/EE affecting all versions fr ...
CVE-2025-0362
An issue has been discovered in GitLab CE/EE affecting all versions from 7.7 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions, an attacker could potentially trick users into unintentionally authorizing sensitive actions on their behalf.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | BDU:2025-05161 Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/CE, связанная с некорректной обработкой логических операций, позволяющая нарушителю оказывать воздействие на целостность и конфиденциальность защищаемой информации | CVSS3: 6.5 | 0% Низкий | 10 месяцев назад |
| BDU:2025-05160 Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/CE, связанная с неограниченным распределением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.5 | 0% Низкий | 10 месяцев назад |
| GHSA-r375-6xr6-qqjq An issue has been discovered in GitLab CE/EE affecting all versions from 7.7 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions, an attacker could potentially trick users into unintentionally authorizing sensitive actions on their behalf. | CVSS3: 6.4 | 0% Низкий | 10 месяцев назад |
| GHSA-6j5x-6p93-f5m6 An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 17.9.6, and 17.10 before 17.10.4. The runtime profiling data of a specific service was accessible to unauthenticated users. | CVSS3: 3.7 | 0% Низкий | 10 месяцев назад |
| GHSA-3jj9-4wwv-fwwp An issue has been discovered in GitLab CE/EE affecting all versions from 13.12 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions users could bypass IP access restrictions and view sensitive information. | CVSS3: 5.3 | 0% Низкий | 10 месяцев назад |
| GHSA-prvg-5h5v-3mxw A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all up to 17.8.7, 17.9 prior to 17.9.6 and 17.10 prior to 17.10.4 A denial of service could occur upon injecting oversized payloads into CI pipeline exports. | CVSS3: 6.5 | 0% Низкий | 10 месяцев назад |
| GHSA-9fxr-6qgm-fprg An issue has been discovered in GitLab EE affecting all versions from 17.1 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. This allows attackers to perform targeted searches with sensitive keywords to get the count of issues containing the searched term." | CVSS3: 6.3 | 0% Низкий | 10 месяцев назад |
 | CVE-2025-0362 An issue has been discovered in GitLab CE/EE affecting all versions from 7.7 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions, an attacker could potentially trick users into unintentionally authorizing sensitive actions on their behalf. | CVSS3: 6.4 | 0% Низкий | 10 месяцев назад |
| CVE-2025-0362 An issue has been discovered in GitLab CE/EE affecting all versions fr ... | CVSS3: 6.4 | 0% Низкий | 10 месяцев назад |
 | CVE-2025-0362 An issue has been discovered in GitLab CE/EE affecting all versions from 7.7 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions, an attacker could potentially trick users into unintentionally authorizing sensitive actions on their behalf. | CVSS3: 6.4 | 0% Низкий | 10 месяцев назад |
Уязвимостей на страницу