Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Gitlab

Gitlabвеб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.

Релизный цикл, информация об уязвимостях

Продукт: Gitlab
Вендор: gitlab

График релизов

19.019.119.220262027

Релизные элементы

KBВерсияБилдДата доступности
17.0.817.0.8
17.0.717.0.7
17.0.617.0.6
17.0.517.0.5
17.0.417.0.4
17.0.317.0.3
17.0.217.0.2
17.0.117.0.1
17.0.017.0.0

Показывать по

Недавние уязвимости Gitlab

Количество 5 920

nvd логотип

CVE-2025-6601

9 месяцев назад

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.3, and 18.5 before 18.5.1 that under certain conditions could have allowed authenticated users to gain unauthorized project access by exploiting the access request approval workflow.

CVSS3: 2.7
EPSS: Низкий
debian логотип

CVE-2025-6601

9 месяцев назад

GitLab has remediated an issue in GitLab EE affecting all versions fro ...

CVSS3: 2.7
EPSS: Низкий
nvd логотип

CVE-2025-11989

9 месяцев назад

GitLab has remediated an issue in GitLab EE affecting all versions from 17.6.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to execute unauthorized quick actions by including malicious commands in specific descriptions.

CVSS3: 3.7
EPSS: Низкий
debian логотип

CVE-2025-11989

9 месяцев назад

GitLab has remediated an issue in GitLab EE affecting all versions fro ...

CVSS3: 3.7
EPSS: Низкий
nvd логотип

CVE-2025-11974

9 месяцев назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to create a denial of service condition by uploading large files to specific API endpoints.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2025-11974

9 месяцев назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2025-11971

9 месяцев назад

GitLab has remediated an issue in GitLab EE affecting all versions from 10.6 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to trigger unauthorized pipeline executions by manipulating commits.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2025-11971

9 месяцев назад

GitLab has remediated an issue in GitLab EE affecting all versions fro ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2025-11447

9 месяцев назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to cause a denial of service condition by sending GraphQL requests with crafted JSON payloads.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2025-11447

9 месяцев назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions ...

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2025-6601

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.3, and 18.5 before 18.5.1 that under certain conditions could have allowed authenticated users to gain unauthorized project access by exploiting the access request approval workflow.

CVSS3: 2.7
0%
Низкий
9 месяцев назад
debian логотип
CVE-2025-6601

GitLab has remediated an issue in GitLab EE affecting all versions fro ...

CVSS3: 2.7
0%
Низкий
9 месяцев назад
nvd логотип
CVE-2025-11989

GitLab has remediated an issue in GitLab EE affecting all versions from 17.6.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to execute unauthorized quick actions by including malicious commands in specific descriptions.

CVSS3: 3.7
0%
Низкий
9 месяцев назад
debian логотип
CVE-2025-11989

GitLab has remediated an issue in GitLab EE affecting all versions fro ...

CVSS3: 3.7
0%
Низкий
9 месяцев назад
nvd логотип
CVE-2025-11974

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to create a denial of service condition by uploading large files to specific API endpoints.

CVSS3: 6.5
0%
Низкий
9 месяцев назад
debian логотип
CVE-2025-11974

GitLab has remediated an issue in GitLab CE/EE affecting all versions ...

CVSS3: 6.5
0%
Низкий
9 месяцев назад
nvd логотип
CVE-2025-11971

GitLab has remediated an issue in GitLab EE affecting all versions from 10.6 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to trigger unauthorized pipeline executions by manipulating commits.

CVSS3: 6.5
0%
Низкий
9 месяцев назад
debian логотип
CVE-2025-11971

GitLab has remediated an issue in GitLab EE affecting all versions fro ...

CVSS3: 6.5
0%
Низкий
9 месяцев назад
nvd логотип
CVE-2025-11447

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to cause a denial of service condition by sending GraphQL requests with crafted JSON payloads.

CVSS3: 7.5
1%
Низкий
9 месяцев назад
debian логотип
CVE-2025-11447

GitLab has remediated an issue in GitLab CE/EE affecting all versions ...

CVSS3: 7.5
1%
Низкий
9 месяцев назад

Уязвимостей на страницу


Поделиться