Vulnerabilities > Gitlab > Gitlab > 4.0.0
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-08-02 | CVE-2023-3401 | Code Injection vulnerability in Gitlab An issue has been discovered in GitLab affecting all versions before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. | 6.5 |
2023-07-26 | CVE-2023-1401 | Exposure of Resource to Wrong Sphere vulnerability in Gitlab 3.1.0/4.0.0 An issue has been discovered in GitLab DAST scanner affecting all versions starting from 3.0.29 before 4.0.5, in which the DAST scanner leak cross site cookies on redirect during authorization. | 4.3 |
2023-06-07 | CVE-2023-2001 | Unspecified vulnerability in Gitlab An issue has been discovered in GitLab CE/EE affecting all versions before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. | 4.3 |
2023-06-07 | CVE-2023-2013 | Unspecified vulnerability in Gitlab An issue has been discovered in GitLab CE/EE affecting all versions starting from 1.2 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. | 4.3 |
2023-05-12 | CVE-2023-2181 | Unspecified vulnerability in Gitlab An issue has been discovered in GitLab affecting all versions before 15.9.8, 15.10.0 before 15.10.7, and 15.11.0 before 15.11.3. | 6.5 |
2023-05-03 | CVE-2023-0756 | Unspecified vulnerability in Gitlab An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. | 8.0 |
2023-05-03 | CVE-2023-0155 | Open Redirect vulnerability in Gitlab An issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10.1. | 5.4 |
2023-04-16 | CVE-2018-17537 | Cross-site Scripting vulnerability in Gitlab An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. | 5.4 |
2023-04-16 | CVE-2019-14942 | Cleartext Transmission of Sensitive Information vulnerability in Gitlab An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6. | 5.9 |
2023-04-16 | CVE-2019-14944 | Command Injection vulnerability in Gitlab An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6. | 6.5 |