GitLab 14.3 < 14.9.5 / 14.10.0 < 14.10.4 / 15.0.0 < 15.0.1 (CVE-2022-1783)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1. It...

GitLab 11.0 < 14.9.5 / 14.10.0 < 14.10.4 / 15.0.0 < 15.0.1 (CVE-2022-1680)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An account takeover issue has been discovered in GitLab EE affecting all versions starting from 11.10 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0...

Gitlab vulnerable to server-side request forgery

Overview Gitlab contains a server-side request forgery vulnerability CWE-918 through the Project Import feature. Kanta Nishitani of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to the developer and coordinated. After coordination was completed, this case was reported to IPA, and...

GitLab 7.9.x < 14.5.4, 14.6.x < 14.6.4, 14.7.x < 14.7.1 SSRF Vulnerability

GitLab is prone to server-side request forgery SSRF vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"...

The vulnerability of SCIM (System of Cross-domain Identity Management) function of the Git-based software platform for collaborative code development on GitLab arises from the ability to invite arbitrary users through their user names and email addresses. This allows a malicious actor to gain control over user accounts by modifying their email addresses.

The vulnerability of SCIM System of Cross-domain Identity Management in the Git-based software platform for collaborative code development on GitLab relates to the ability to invite arbitrary users through their user names and email addresses. Exploiting this vulnerability could allow a malicious...

PT-2022-14209 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 15.0 through 15.0.1 Description: An issue has been discovered in GitLab where missing validation of input used in quick actions allowed an attacker to exploit XSS by injecting HTML in contact details. Recommendations: For GitL...

GitLab 13.9 < 14.8.6 / 14.9 < 14.9.4 / 14.10 < 14.10.1 (CVE-2022-1510)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab w...

CVE-2022-1510

An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly handling malicious text in the CI Editor and CI Pipeline details page allowing t...

CVE-2022-1426

An issue has been discovered in GitLab affecting all versions starting from 12.6 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly authenticating a user that had some certain amount of information which allowed ...

PT-2022-13924 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 13.9 through 14.8.5 GitLab versions 14.9 through 14.9.3 GitLab versions 14.10 through 14.10.0 Description: An issue has been discovered in GitLab where it does not correctly handle malicious text in the CI Editor and CI Pipeli...

GitLab 输入验证错误漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. An input validation error vulnerability exists in Gitlab Community Edition...

GitLab 13.9 < 14.2.6 / 14.3 < 14.3.4 / 14.4 < 14.4.1 (CVE-2021-39911)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An improper access control flaw in all versions of GitLab CE/EE starting from 13.9 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 expos...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to incorrect authentication procedures, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect configuration of access rights for previously deleted users. Exploiting this vulnerability allows a malicious actor to compromise data integrity and cause service interruption...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to errors in resource release, allows a violator to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect handling of user names. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service interruptions...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the absence of filtering for the default branch name. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from insufficient neutralization of certain elements in the query, allowing an attacker to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the insufficient neutralization of certain elements in the request. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to information disclosure, allows attackers to gain access to confidential data.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of access control checks. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to lack of access control, allows a perpetrator to gain access to confidential data and compromise its integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the ability to update a secure branch. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data and compromise its integrity...

The vulnerability of the software platform based on Git for collaborative code development on GitLab allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the improper display of code in merge requests. Exploiting this vulnerability allows a malicious actor, operating remotely, to access confidential data, compromise its integrity, and...

The vulnerability of the Git-based software platform for collaborative code development on GitLab allows a hacker to gain access to confidential data.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the display of an email address in error messages. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...