Vulnerabilities > Gitlab > Gitlab > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-02-13 | CVE-2022-4138 | Cross-Site Request Forgery (CSRF) vulnerability in Gitlab A Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions before 15.6.7, all versions starting from 15.7 before 15.7.6, and all versions starting from 15.8 before 15.8.1. | 8.1 |
| 2023-02-13 | CVE-2023-0518 | Unspecified vulnerability in Gitlab An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. | 7.5 |
| 2023-01-27 | CVE-2022-4205 | Type Confusion vulnerability in Gitlab In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash. | 7.5 |
| 2023-01-26 | CVE-2022-4092 | Cross-site Scripting vulnerability in Gitlab 15.6.0 An issue has been discovered in GitLab EE affecting all versions starting from 15.6 before 15.6.1. | 8.0 |
| 2023-01-12 | CVE-2022-3613 | Unspecified vulnerability in Gitlab An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. | 7.5 |
| 2023-01-12 | CVE-2022-4037 | Race Condition vulnerability in Gitlab An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. | 8.5 |
| 2023-01-12 | CVE-2022-4167 | Incorrect Authorization vulnerability in Gitlab Incorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2 allows group access tokens to continue working even after the group owner loses the ability to revoke them. | 7.5 |
| 2022-11-09 | CVE-2022-3285 | Unspecified vulnerability in Gitlab Bypass of healthcheck endpoint allow list affecting all versions from 12.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an unauthorized attacker to prevent access to GitLab | 7.5 |
| 2022-10-21 | CVE-2022-3639 | Resource Exhaustion vulnerability in Gitlab A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 10.8 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. | 7.5 |
| 2022-10-17 | CVE-2022-2428 | Cross-site Scripting vulnerability in Gitlab A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions before 15.1.6, 15.2 to 15.2.4, and 15.3 to 15.3.2 allows an attacker to issue arbitrary HTTP requests | 7.3 |