Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

TI-2023-01899 CVE-2023-2022 · GHSA-3cgp-mpf6-c8vw

Missing Authorization in GitLab

Priority MEDIUM 53

An issue has been discovered in GitLab CE/EE affecting all versions starting before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2, which leads to developers being ab…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00464 Published 2023-08-02 Fixed in 16.0.8, 16.1.3 +1 CWE-262
Priority MEDIUM 64

An issue has been discovered in GitLab affecting all versions before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00583 Published 2023-08-02 Fixed in 16.0.8, 16.1.3 +1 CWE-94
Priority LOW 34

An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00724 Published 2023-08-02 Fixed in 16.0.8, 16.1.3 +1 CWE-532
Priority HIGH 72

An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00958 Published 2023-08-02 Fixed in 16.0.8, 16.1.3 +1 CWE-1333