Vulnerabilities > Gitlab
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-02-13 | CVE-2023-0518 | Unspecified vulnerability in Gitlab An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. | 7.5 |
| 2023-02-01 | CVE-2022-4206 | Unspecified vulnerability in Gitlab Dast API Scanner 1.6.50 A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report | 6.5 |
| 2023-01-27 | CVE-2022-4201 | Server-Side Request Forgery (SSRF) vulnerability in Gitlab A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to connect to local addresses when configuring a malicious GitLab Runner. | 5.3 |
| 2023-01-27 | CVE-2022-4205 | Type Confusion vulnerability in Gitlab In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash. | 7.5 |
| 2023-01-27 | CVE-2022-4255 | Unspecified vulnerability in Gitlab An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload. | 5.3 |
| 2023-01-27 | CVE-2022-4335 | Server-Side Request Forgery (SSRF) vulnerability in Gitlab A blind SSRF vulnerability was identified in all versions of GitLab EE prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which allows an attacker to connect to a local host. | 4.3 |
| 2023-01-26 | CVE-2022-4054 | Unspecified vulnerability in Gitlab An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions starting from 15.6 before 15.6.1. | 5.5 |
| 2023-01-26 | CVE-2022-4092 | Cross-site Scripting vulnerability in Gitlab 15.6.0 An issue has been discovered in GitLab EE affecting all versions starting from 15.6 before 15.6.1. | 8.0 |
| 2023-01-26 | CVE-2022-3902 | Unspecified vulnerability in Gitlab An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions starting from 15.6 before 15.6.1. | 6.4 |
| 2023-01-26 | CVE-2022-3478 | Unrestricted Upload of File with Dangerous Type vulnerability in Gitlab An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions starting from 15.6 before 15.6.1. | 4.3 |