GitLab vulnerabilities
1,178 CVEs and advisories name GitLab as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-3914Incorrect User Management in GitLab
- CVE-2023-3906Improper Validation of Specified Type of Input in GitLab
- CVE-2023-3979Incorrect Authorization in GitLab
- CVE-2023-4532Incorrect Authorization in GitLab
- CVE-2023-5009Incorrect Authorization in GitLab
- CVE-2023-4630Missing Authorization in GitLab
- CVE-2023-3210Inefficient Regular Expression Complexity in GitLab
- CVE-2023-3950Cleartext Storage of Sensitive Information in GitLab
- CVE-2023-4018Direct Request ('Forced Browsing') in GitLab
- CVE-2023-4378Insertion of Sensitive Information Into Sent Data in GitLab
- CVE-2023-4647Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2022-4343Exposure of Sensitive Information to an Unauthorized Actor in GitLab
- CVE-2023-0120Incorrect Authorization in GitLab
- CVE-2023-1279URL Redirection to Untrusted Site in GitLab
- CVE-2023-1555Missing Authorization in GitLab
- CVE-2023-3205Inefficient Regular Expression Complexity in GitLab
- CVE-2023-3915Incorrect Execution-Assigned Permissions in GitLab
- CVE-2023-4522Improper Validation of Specified Type of Input in GitLab
- CVE-2023-4002Insertion of Sensitive Information Into Sent Data in GitLab
- CVE-2023-4008Incorrect Ownership Assignment in GitLab
- CVE-2023-3932Incorrect User Management in GitLab
- CVE-2023-2022Missing Authorization in GitLab
- CVE-2023-3401Improper Control of Generation of Code ('Code Injection') in GitLab
- CVE-2023-4011Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2023-3500Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2023-3900Improper Validation of Specified Type of Input in GitLab
- CVE-2023-3993Insertion of Sensitive Information into Log File in GitLab
- CVE-2023-3994Inefficient Regular Expression Complexity in GitLab
- CVE-2023-0632Inefficient Regular Expression Complexity in GitLab
- CVE-2023-1210Generation of Error Message Containing Sensitive Information in GitLab