GitLab vulnerabilities
1,178 CVEs and advisories name GitLab as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-2818Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2024-0199Incorrect Authorization in GitLab
- CVE-2024-1299Privilege Chaining in GitLab
- CVE-2023-4895Missing Authorization in GitLab
- CVE-2023-6477Incorrect Privilege Assignment in GitLab
- CVE-2024-0410Improper Enforcement of Behavioral Workflow in GitLab
- CVE-2024-1451Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2024-1525Authentication Bypass Using an Alternate Path or Channel in GitLab
- CVE-2024-0861Direct Request ('Forced Browsing') in GitLab
- CVE-2023-3509Incorrect Authorization in GitLab
- CVE-2024-1250Privilege Chaining in GitLab
- CVE-2023-6564Incorrect Authorization in GitLab
- CVE-2023-6736Inefficient Regular Expression Complexity in GitLab
- CVE-2023-6840Missing Authorization in GitLab
- CVE-2024-1066Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2023-5612Missing Authorization in GitLab
- CVE-2023-6159Inefficient Regular Expression Complexity in GitLab
- CVE-2023-5933Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab
- CVE-2024-0456Direct Request ('Forced Browsing') in GitLab
- CVE-2024-0402Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
- CVE-2023-2030Improper Verification of Cryptographic Signature in GitLab
- CVE-2023-4812Incorrect Authorization in GitLab
- CVE-2023-5356Incorrect Authorization in GitLab
- CVE-2023-7028Weak Password Recovery Mechanism for Forgotten Password in GitLab
- CVE-2023-6955Missing Authorization in GitLab
- CVE-2023-3907Improper User Management in GitLab
- CVE-2023-3904Improper Validation of Specified Type of Input in GitLab
- CVE-2023-5061Missing Authorization in GitLab
- CVE-2023-5512Improper Control of Generation of Code ('Code Injection') in GitLab
- CVE-2023-6051Improper Control of Generation of Code ('Code Injection') in GitLab