Vulnerabilities fixed in GitLab CE and EE

🗓️ 31 Aug 2022 00:00:00Reported by NCSCType

GitLab CE and EE fixed vulnerabilities, including critical code execution via Import from GitHub.

Reporter	Title	Published	Views	Family All 233
0day.today	GitLab GitHub Repo Import Deserialization Remote Code Execution Exploit	15 Feb 202300:00	–	zdt
GithubExploit	Exploit for Injection in Gitlab	14 Oct 202220:47	–	githubexploit
GithubExploit	Exploit for Injection in Gitlab	8 Oct 202211:42	–	githubexploit
Arista	Security Advisory 0079	26 Jul 202200:00	–	arista
BDU FSTEC	The vulnerability of the import function in GitHub’s software platform, based on Git, for collaborative code development on GitLab, allows a perpetrator to execute arbitrary code.	2 Sep 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.	2 Sep 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab allows a hacker to trigger a service failure.	2 Sep 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the IP address restriction function of the software platform based on Git for collaborative code development on GitLab allows a hacker to circumvent existing security restrictions.	2 Sep 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the LivePreview function in the git-based software platform for collaborative code development on GitLab allows a perpetrator to gain unauthorized access to protected information.	2 Sep 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from insufficient validation of input data. This allows attackers to introduce arbitrary data.	2 Sep 202200:00	–	bdu_fstec