Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Release: GitLab 16.1.5, 16.2.5, 16.3.1 Clear all filters
TI-2023-03006 CVE-2023-3210 · GHSA-qrrr-vqv8-9hcw

Inefficient Regular Expression Complexity in GitLab

Priority MEDIUM 62

An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00812 Published 2023-09-01 Fixed in 16.1.5, 16.2.5 +1 CWE-1333
TI-2023-04044 CVE-2023-4378 · GHSA-mp7g-3r25-fq9v

Insertion of Sensitive Information Into Sent Data in GitLab

Priority MEDIUM 58

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00509 Published 2023-09-01 Fixed in 16.1.5, 16.2.5 +1 CWE-201
TI-2023-04283 CVE-2023-4647 · GHSA-43fr-qgqj-789v

Allocation of Resources Without Limits or Throttling in GitLab

Priority HIGH 72

An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 in which the projects API pagin…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00732 Published 2023-09-01 Fixed in 16.1.5, 16.2.5 +1 CWE-770
TI-2022-03976 CVE-2022-4343 · GHSA-xcv9-mgjj-4fmc

Exposure of Sensitive Information to an Unauthorized Actor in GitLab

Priority LOW 23

An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 in which a project member c…

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00474 Published 2023-09-01 Fixed in 16.1.5, 16.2.5 +1 CWE-200
TI-2023-00115 CVE-2023-0120 · GHSA-h3r9-rg3q-7f5f

Incorrect Authorization in GitLab

Priority MEDIUM 53

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00415 Published 2023-09-01 Fixed in 16.1.5, 16.2.5 +1 CWE-863
TI-2023-01208 CVE-2023-1279 · GHSA-mq4m-g352-xm82

URL Redirection to Untrusted Site in GitLab

Priority LOW 27

An issue has been discovered in GitLab affecting all versions starting from 4.1 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 where it was possible to create…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00356 Published 2023-09-01 Fixed in 16.1.5, 16.2.5 +1 CWE-601
TI-2023-01467 CVE-2023-1555 · GHSA-wc5c-7jg2-cprf

Missing Authorization in GitLab

Priority LOW 20

An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0046 Published 2023-09-01 Fixed in 16.1.5, 16.2.5 +1 CWE-262
TI-2023-03002 CVE-2023-3205 · GHSA-8gh5-v944-cphh

Inefficient Regular Expression Complexity in GitLab

Priority MEDIUM 62

An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00849 Published 2023-09-01 Fixed in 16.1.5, 16.2.5 +1 CWE-1333
TI-2023-03651 CVE-2023-3915 · GHSA-3m8p-28cp-6cg5

Incorrect Execution-Assigned Permissions in GitLab

Priority HIGH 65

An issue has been discovered in GitLab EE affecting all versions starting from 16.1 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00682 Published 2023-09-01 Fixed in 16.1.5, 16.2.5 +1 CWE-279