29 matches found
CVEs
CVE-2022-2992: Github 가져오기를 통한 원격 명령 실행 정보 설명: 인증된 사용자는 Github에서 Gitlab으로 저장소를 가져올 수 있습니다. 중첩된 defaultbranch에 Redis 직렬화 프로토콜 객체를 응답하는 공격자의 컨트롤러 서버에서 가져오기를 시도할 수 있으며, 이를 통해 Gitlab이 이 객체를 Redis에 캐시하게 하고, Redis가 이를 역직렬화하여 페이로드를 실행하도록 트리거할 수 있습니다. 영향받는 버전: 11.10부터 15.1.6 이전, 15.2 15.2.4, 15.3 15.3.2...
CVE-2022-2992
CVE-2022-2992 Esecuzione remota di comandi autenticata in GitLab tramite importazione da GitHub. Una vulnerabilità in GitLab CE/EE che interessa tutte le versioni dalla 11.10 precedenti alla 15.1.6, tutte le versioni a partire dalla 15.2 precedenti alla 15.2.4, tutte le versioni a partire dalla...
CVE-2022-2992
CVE-2022-2992 GitHub import के माध्यम से GitLab में प्रमाणित रिमोट कमांड निष्पादन। GitLab CE/EE में एक भेद्यता जो 11.10 से आरंभ होकर 15.1.6 से पहले तक के सभी संस्करणों, 15.2 से आरंभ होकर 15.2.4 से पहले तक के सभी संस्करणों, 15.3 से आरंभ होकर 15.3.2 से पहले तक के सभी संस्करणों को प्रभावित करती है। ...
Linux Distros Unpatched Vulnerability : CVE-2022-0154
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions starting from 7.7 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions...
Linux Distros Unpatched Vulnerability : CVE-2020-13326
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the restriction for Github project import could be bypassed...
Linux Distros Unpatched Vulnerability : CVE-2022-2884
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3.1 allows an an authenticated user to...
BIT-GITLAB-2024-8973 Allocation of Resources Without Limits or Throttling in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2. It was possible to cause a DoS condition via GitHub import requests using a malicious crafted payload...
UBUNTU-CVE-2024-8973
An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2. It was possible to cause a DoS condition via GitHub import requests using a malicious crafted payload...
CVE-2024-8973
CVE-2024-8973 affects GitLab CE/EE. A DoS condition can be triggered by a maliciously crafted payload in GitHub import requests. Affected versions: GitLab 17.1 up to 17.9.7/8 (inclusive of 17.1–17.1.x), 17.10 up to 17.10.5/6, and 17.11 up to 17.11.1/2. The provided documents do not specify a deta...
CVE-2024-8973 Allocation of Resources Without Limits or Throttling in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2. It was possible to cause a DoS condition via GitHub import requests using a malicious crafted payload...
GitLab 安全漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab CE/EE versions prior to 17.11.2, whi...
Gitlab -- vulnerabilities
Gitlab reports: Partial Bypass for Device OAuth flow using Cross Window Forgery Denial of service by abusing Github import API Group IP restriction bypass allows disclosing issue title of restricted project...
UBUNTU-CVE-2023-6195
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.5 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. GitLab was vulnerable to Server Side Request Forgery when an attacker uses a malicious URL in the markdown image...
BIT-GITLAB-2023-3362 Generation of Error Message Containing Sensitive Information in GitLab
An information disclosure issue in GitLab CE/EE affecting all versions from 16.0 prior to 16.0.6, and version 16.1.0 allows unauthenticated actors to access the import error information if a project was imported from GitHub...
PT-2025-1562 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 15.5 through 16.9.7 GitLab CE/EE versions 16.10 through 16.10.5 GitLab CE/EE versions 16.11 through 16.11.2 Description: The issue is related to Server Side Request Forgery SSRF in GitLab CE/EE. An attacker can exploit...
UBUNTU-CVE-2023-3362
An information disclosure issue in GitLab CE/EE affecting all versions from 16.0 prior to 16.0.6, and version 16.1.0 allows unauthenticated actors to access the import error information if a project was imported from GitHub...
Information disclosure
An information disclosure issue in GitLab CE/EE affecting all versions from 16.0 prior to 16.0.6, and version 16.1.0 allows unauthenticated actors to access the import error information if a project was imported from GitHub...
CVE-2023-3362 Generation of Error Message Containing Sensitive Information in GitLab
An information disclosure issue in GitLab CE/EE affecting all versions from 16.0 prior to 16.0.6, and version 16.1.0 allows unauthenticated actors to access the import error information if a project was imported from GitHub...
CVE-2023-3362 Generation of Error Message Containing Sensitive Information in GitLab
An information disclosure issue in GitLab CE/EE affecting all versions from 16.0 prior to 16.0.6, and version 16.1.0 allows unauthenticated actors to access the import error information if a project was imported from GitHub...
