Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: GitLab Component: Runner Clear all filters
TI-2022-02076 CVE-2022-2251 · GHSA-cxfq-cc8j-j2pp

OS command injection in GitLab Runner

Priority LOW 39

Improper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a user who creates a branch with a specially crafted name and gets anot…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01177 Published 2023-01-17 Fixed in 15.3.5, 15.4.4 +1 CWE-78
TI-2020-10420 CVE-2020-13295 · GHSA-83vw-qmcc-rxwg

Server-side request forgery in GitLab Runner

Priority MEDIUM 40

For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01169 Published 2020-08-10 Fixed in 13.0.12, 13.1.6 +1 CWE-918