GitLab input validation vulnerability

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. An input validation error vulnerability exists in Gitlab Community Edition...

GitLab 13.9 < 14.2.6 / 14.3 < 14.3.4 / 14.4 < 14.4.1 (CVE-2021-39911)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An improper access control flaw in all versions of GitLab CE/EE starting from 13.9 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 expos...

GitLab Authentication Bypass DoS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect configuration of access rights for previously deleted users. Exploiting this vulnerability allows a malicious actor to compromise data integrity and cause service interruption...

GitLab Git Data Compromise

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the absence of filtering for the default branch name. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

GitLab Access Control Confidential Data Compromise

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the ability to update a secure branch. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data and compromise its integrity...

GitLab Query Data Compromise

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the insufficient neutralization of certain elements in the request. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

GitLab Information Disclosure

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of access control checks. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data...

GitLab Resource Leak DoS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect handling of user names. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service interruptions...

GitLab Confidential Data Access

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the improper display of code in merge requests. Exploiting this vulnerability allows a malicious actor, operating remotely, to access confidential data, compromise its integrity, and...

GitLab Confidential Data Access

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the display of an email address in error messages. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

GitLab Confidential Data Access Data Compromise

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the possibility for users to delete tokens. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data and compromise its integrity...

GitLab Information Disclosure

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to confusion between tag names and branches. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

CVE-2022-0344

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting from 10.1 before 14.6.4, all versions starting from 10.2 before 14.7.1. Private project paths can be disclosed to unauthorized users via system notes when an Issue is closed via a...

CVE-2022-0249

A vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a blind SSRF attack since requests to shared address space were not blocked...

CVE-2022-0249

Removed by vendor...

CVE-2022-0154

An issue has been discovered in GitLab affecting all versions starting from 7.7 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was vulnerable to a Cross-Site Request Forgery attack that allows a malicious user to have their...

Design/Logic Flaw

An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was not correctly handling requests to delete existing packages which could result in a Denial ...

GitLab information leakage vulnerability

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. There is an information disclosure vulnerability in GitLab, no more informatio...

GitLab Cross-Site Request Forgery Vulnerability

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A cross-site request forgery vulnerability exists in GitLab, which stems from ...

CVE-2021-39917

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. A regular expression related to quick actions features was susceptible to catastrophic backtracking...