Vulnerabilities > Gitlab

DATE CVE VULNERABILITY TITLE RISK
2021-05-06 CVE-2021-22210 Allocation of Resources Without Limits or Throttling vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2.
network
low complexity
gitlab CWE-770
5.0
2021-05-06 CVE-2021-22211 Incorrect Authorization vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.
network
gitlab CWE-863
3.5
2021-04-23 CVE-2021-22205 Code Injection vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9.
network
low complexity
gitlab CWE-94
7.5
2021-04-22 CVE-2021-22199 Cross-site Scripting vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions starting with 12.9.
network
gitlab CWE-79
3.5
2021-04-12 CVE-2021-22190 Path Traversal vulnerability in Gitlab
A path traversal vulnerability via the GitLab Workhorse in all versions of GitLab could result in the leakage of a JWT token
network
low complexity
gitlab CWE-22
4.0
2021-04-02 CVE-2021-22203 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.9 before 13.8.7, all versions starting from 13.9 before 13.9.5, and all versions starting from 13.10 before 13.10.1.
network
low complexity
gitlab
7.5
2021-04-02 CVE-2021-22202 Cross-Site Request Forgery (CSRF) vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all previous versions.
network
gitlab CWE-352
4.3
2021-04-02 CVE-2021-22201 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9.
network
low complexity
gitlab
4.0
2021-04-02 CVE-2021-22200 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6.
network
gitlab
4.3
2021-04-02 CVE-2021-22198 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing an authenticated user to delete incident metric images of public projects.
network
low complexity
gitlab
4.0