CVE-2026-19478

-b91c1c?style=flat-square CVE-2026-19478 — Nuclei 模板 针对 CVE-2026-19478 的非破坏性 Nuclei 检测模板。该漏洞是 GitLab GraphQL API 中的一个严重（CVSS 9.4）未认证任意方法调用缺陷，GitLab 已于 2026 年 8 月 17 日 修复。 TL;DR GitLab 的 GraphQL schema 支持一个 @glintroducedversion: "X.Y.Z" 指令，该指令将某个字段限制为仅在最低 GitLab 版本上可用。当该指令引用的版本 高于 当前运行实例时，GitLab...

CVE-2026-19478

CVE-2026-19478 Eliminación no autenticada de proyectos GitLab GraphQL ★ CVE-2026-19478 PoC de invocación arbitraria de métodos no autenticada mediante @glintroduced en GitLab GraphQL ★ https://github.com/user-attachments/assets/bb5d5f8a-a9bf-4148-854b-14c25c501d4b Resumen CVE-2026-19478 es una...

CVE-2023-2825

CVE-2023-2825 - GitLab CE/EE 16.0.0 通过路径遍历导致任意文件读取 2023年5月23日，GitLab 发布了 16.0.1 版本，修复了一个影响社区版 CE 和企业版 EE 16.0.0 的关键漏洞 CVE-2023-2825。该漏洞允许未经身份验证的用户通过路径遍历缺陷读取任意文件。该漏洞由 pwnie 通过 HackerOne 的漏洞赏金计划发现。 在撰写本文时，尚无公开的概念验证可用。 GitLab 公告 未经身份验证的恶意用户可以利用路径遍历漏洞，在至少嵌套在五个组内的公共项目中存在附件时，读取服务器上的任意文件。这是一个严重级别的问题...

GitLab-CVE-2021-22205-

漏洞影响 在GitLab CE/EE中发现了一个问题，影响所有从11.9版本开始的版本。GitLab未能正确验证传递给文件解析器的图像文件，导致了远程命令执行。 受影响版本 Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE 13.8.8 漏洞影响 即将... 参考 https://github.com/mr-r3bot/Gitlab-CVE-2021-22205 https://devcraft.io/2021/05/04/exiftool-arbitrary-code-execution-cve-2021-22204.html...

CVE-2023-2825-PoC

CVE-2023-2825-PoC 针对 CVE-2023-2825 的概念验证，这是 GitLab CE/EE 16.0.0 中的一个任意文件读取漏洞。 该脚本使用有效的 GitLab 账户登录，创建所需的公开嵌套组结构，创建一个公开项目，上传附件，并利用易受攻击的上传路径遍历行为从 GitLab 服务器读取目标文件。 它还支持复用现有上传路径，因此您无需为每次文件读取都创建新的组和项目。 功能说明 1. 向目标 GitLab 实例进行身份验证。 2. 使用短路径创建嵌套的公开组，以实现可靠的深层嵌套。 3. 在最深层的组内创建一个公开项目。 4. 向该项目上传一个小的附件。 5...

gitlab_rce_cve-2022-2884

gitlabrcecve-2022-2884 Este es un programa Python3 que explota la vulnerabilidad de RCE autenticada de GitLab conocida como CVE-2022-2884. DESCARGO DE RESPONSABILIDAD Esta herramienta está destinada a ingenieros de seguridad y personal de appsec para evaluaciones de seguridad. Úsela de manera...

BIT-GITLAB-2026-10053 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to achieve remote code execution due to a path traversal vulnerability in the package...

FreeBSD : Gitlab -- Vulnerabilities (161b1c49-a29b-11f1-a883-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 161b1c49-a29b-11f1-a883-2cf05da270f3 advisory. Gitlab reports: Inclusion of Functionality from Untrusted Control Sphere issue in Duo Claude A...

CVE-2021-22205

CVE-2021-22205 Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE 13.8.8 Uso: root@kitploit: Verificar vulnerabilidade: python 22205exp.py -u url -v Executar comando: python 22205exp.py -u url -c command Verificação em lote: python 22205exp.py -f filename Referência: root@kitploit:...

CVE-2026-77801

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, could have allowed an authenticated user to cause a denial of service affecting background job processing, due to missing objec...

CVE-2026-77801 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, could have allowed an authenticated user to cause a denial of service affecting background job processing, due to missing objec...

CVE-2026-77801

GitLab CE/EE versions from 12.8 before 19.1.7 , 19.2 before 19.2.5 , and 19.3 before 19.3.1 are affected by an Allocation of Resources Without Limits or Throttling issue. The root cause is missing object count limits in background job processing , which under certain conditions could allow an aut...

EUVD-2026-66427

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, could have allowed an authenticated user to cause a denial of service affecting background job processing, due to missing objec...

PT-2026-82103

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 12.8 through 19.1.6 GitLab CE/EE versions 19.2 through 19.2.4 GitLab CE/EE versions 19.3 through 19.3.0 Description An issue exists where an authenticated user can cause a denial of service affecting background job...

GitLab 12.8 < 19.1.7 / 19.2 < 19.2.5 / 19.3 < 19.3.1 (CVE-2026-77801)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, could have allowed an...

Exploit for CVE-2020-1472

C...

CVE-2026-10053

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to achieve remote code execution due to a path traversal vulnerability in the package...

CVE-2026-10053 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to achieve remote code execution due to a path traversal vulnerability in the package...

EUVD-2026-64645

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to achieve remote code execution due to a path traversal vulnerability in the package...

PT-2026-79764

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.8 through 19.0.5 GitLab CE/EE versions 19.1 through 19.1.3 GitLab CE/EE versions 19.2 through 19.2.1 Description An authenticated user can achieve remote code execution due to a path traversal flaw in the package...