Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: GitLab 16.0.8, 16.1.3, 16.2.2 Clear all filters
TI-2023-00599 CVE-2023-0632 · GHSA-v648-cf9r-9m29

Inefficient Regular Expression Complexity in GitLab

Priority HIGH 66

An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00918 Published 2023-08-01 Fixed in 16.0.8, 16.1.3 +1 CWE-1333
TI-2023-01144 CVE-2023-1210 · GHSA-96gj-7pcm-7895

Generation of Error Message Containing Sensitive Information in GitLab

Priority MEDIUM 53

An issue has been discovered in GitLab affecting all versions starting from 12.9 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.006 Published 2023-08-01 Fixed in 16.0.8, 16.1.3 +1 CWE-209
TI-2023-03147 CVE-2023-3364 · GHSA-hf2f-3fp9-m472

Inefficient Regular Expression Complexity in GitLab

Priority HIGH 72

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.44494 Published 2023-08-01 Fixed in 16.0.8, 16.1.3 +1 CWE-1333