Vulnerabilities > Gitlab

DATE CVE VULNERABILITY TITLE RISK
2023-06-07 CVE-2023-2198 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.7 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2.
network
low complexity
gitlab
7.5
2023-06-07 CVE-2023-2199 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.0 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2.
network
low complexity
gitlab
7.5
2023-06-07 CVE-2023-2485 Improper Privilege Management vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.1 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2.
network
low complexity
gitlab CWE-269
4.9
2023-06-07 CVE-2023-2589 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2.
network
low complexity
gitlab
5.3
2023-06-07 CVE-2023-2442 Cross-site Scripting vulnerability in Gitlab 15.11.0/15.11.2
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2.
network
low complexity
gitlab CWE-79
5.4
2023-06-06 CVE-2023-1621 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.5, all versions starting from 15.11 before 15.11.1.
network
low complexity
gitlab
6.5
2023-06-06 CVE-2023-0921 Resource Exhaustion vulnerability in Gitlab
A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage.
network
low complexity
gitlab CWE-400
4.3
2023-06-06 CVE-2023-2132 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2.
network
low complexity
gitlab
7.5
2023-05-26 CVE-2023-2825 Path Traversal vulnerability in Gitlab 16.0.0
An issue has been discovered in GitLab CE/EE affecting only version 16.0.0.
network
low complexity
gitlab CWE-22
7.5
2023-05-12 CVE-2023-2181 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions before 15.9.8, 15.10.0 before 15.10.7, and 15.11.0 before 15.11.3.
network
low complexity
gitlab
6.5