Vulnerabilities > Gitlab > Gitlab > 11.6.10

DATE CVE VULNERABILITY TITLE RISK
2023-09-29 CVE-2023-3914 Unspecified vulnerability in Gitlab
A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal projects.
network
low complexity
gitlab
5.3
2023-09-29 CVE-2023-3917 Unspecified vulnerability in Gitlab
Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attacker to cause pipelines to fail.
network
low complexity
gitlab
7.5
2023-09-29 CVE-2023-3920 Insufficient Verification of Data Authenticity vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions starting from 11.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1.
network
low complexity
gitlab CWE-345
4.3
2023-09-29 CVE-2023-3979 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1.
network
low complexity
gitlab
4.3
2023-09-11 CVE-2023-4630 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 in which any user can read limited information about any project's imports.
network
low complexity
gitlab
4.3
2023-09-01 CVE-2023-0120 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions starting from 10.0 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1.
network
low complexity
gitlab
4.3
2023-09-01 CVE-2023-1279 Open Redirect vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions starting from 4.1 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 where it was possible to create a URL that would redirect to a different project.
network
low complexity
gitlab CWE-601
6.1
2023-08-02 CVE-2023-2022 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2, which leads to developers being able to create pipeline schedules on protected branches even if they don't have access to merge
network
low complexity
gitlab
4.3
2023-08-02 CVE-2023-3401 Code Injection vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2.
network
low complexity
gitlab CWE-94
6.5
2023-08-02 CVE-2023-3500 Cross-site Scripting vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2.
network
low complexity
gitlab CWE-79
6.1