Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Release: GitLab 15.11.10, 16.0.6, 16.1.1 Clear all filters
TI-2023-02449 CVE-2023-2620 · GHSA-58hc-8hp4-v536

Insertion of Sensitive Information Into Sent Data in GitLab

Priority MEDIUM 58

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.1 prior to 15.11.10, all versions from 16.0 prior to 16.0.6, all versions from 16.1 prior to 16.1.1.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00549 Published 2023-07-13 Fixed in 15.11.10, 16.0.6 +1 CWE-201
TI-2023-02408 CVE-2023-2576 · GHSA-242m-wgg2-vv66

Incorrect Authorization in GitLab

Priority MEDIUM 53

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00473 Published 2023-07-13 Fixed in 15.11.10, 16.0.6 +1 CWE-863
TI-2023-03146 CVE-2023-3363 · GHSA-2wh2-fff9-4m63

Insertion of Sensitive Information into Log File in GitLab

Priority MEDIUM 52

An information disclosure issue in Gitlab CE/EE affecting all versions from 13.6 prior to 15.11.10, all versions from 16.0 prior to 16.0.6, all versions from 16.1 prior to 16.1.1, resulted in the Sidekiq log including we…

CVSS 3.1LOW 3.9 Local High privileges No interaction EPSS 0.00185 Published 2023-07-13 Fixed in 15.11.10, 16.0.6 +1 CWE-532
TI-2023-03218 CVE-2023-3444 · GHSA-qccj-j742-ww2r

Incorrect Authorization in GitLab

Priority MEDIUM 62

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.3 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows an attack…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00521 Published 2023-07-13 Fixed in 15.11.10, 16.0.6 +1 CWE-863
TI-2023-03200 CVE-2023-3424 · GHSA-73w2-5f6g-jx42

Inefficient Regular Expression Complexity in GitLab

Priority MEDIUM 41

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.3 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-07-13 Fixed in 15.11.10, 16.0.6 +1 CWE-1333
TI-2023-02063 CVE-2023-2200 · GHSA-w7pv-hcjh-p9w4

Improper Encoding or Escaping of Output in GitLab

Priority MEDIUM 58

An issue has been discovered in GitLab CE/EE affecting all versions starting from 7.14 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows an attack…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0046 Published 2023-07-13 Fixed in 15.11.10, 16.0.6 +1 CWE-116
TI-2023-02054 CVE-2023-2190 · GHSA-258v-vrh7-jgj2

Authorization Bypass Through User-Controlled Key in GitLab

Priority MEDIUM 62

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.10 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00663 Published 2023-07-13 Fixed in 15.11.10, 16.0.6 +1 CWE-639