Vulnerabilities > Gitlab

DATE CVE VULNERABILITY TITLE RISK
2023-12-01 CVE-2023-4658 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab EE affecting all versions starting from 8.13 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1.
network
high complexity
gitlab
3.1
2023-12-01 CVE-2023-4912 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab EE affecting all versions starting from 10.5 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1.
network
low complexity
gitlab
6.5
2023-12-01 CVE-2023-5226 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1.
network
low complexity
gitlab
7.5
2023-12-01 CVE-2023-5995 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab EE affecting all versions starting from 16.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1.
network
low complexity
gitlab
7.5
2023-12-01 CVE-2023-6033 Cross-site Scripting vulnerability in Gitlab
Improper neutralization of input in Jira integration configuration in GitLab CE/EE, affecting all versions from 15.10 prior to 16.6.1, 16.5 prior to 16.5.3, and 16.4 prior to 16.4.3 allows attacker to execute javascript in victim's browser.
network
low complexity
gitlab CWE-79
5.4
2023-11-09 CVE-2023-4379 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab EE affecting all versions starting from 15.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1.
network
low complexity
gitlab
7.5
2023-11-06 CVE-2023-4700 Unspecified vulnerability in Gitlab
An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1, allowed a user to run jobs in protected environments, bypassing any required approvals.
network
low complexity
gitlab
6.5
2023-11-06 CVE-2023-3246 Allocation of Resources Without Limits or Throttling vulnerability in Gitlab
An issue has been discovered in GitLab EE/CE affecting all versions starting before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1 which allows an attackers to block Sidekiq job processor.
network
low complexity
gitlab CWE-770
4.3
2023-11-06 CVE-2023-3399 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1.
network
low complexity
gitlab
7.7
2023-11-06 CVE-2023-3909 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.3 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1.
network
low complexity
gitlab
6.5