Vulnerabilities > Gitlab > High

DATE CVE VULNERABILITY TITLE RISK
2023-03-09 CVE-2022-4331 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab EE affecting all versions starting from 15.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2.
network
low complexity
gitlab
7.3
2023-02-13 CVE-2022-3759 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1.
network
low complexity
gitlab
7.5
2023-02-13 CVE-2022-4138 Cross-Site Request Forgery (CSRF) vulnerability in Gitlab
A Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions before 15.6.7, all versions starting from 15.7 before 15.7.6, and all versions starting from 15.8 before 15.8.1.
network
low complexity
gitlab CWE-352
8.1
2023-02-13 CVE-2023-0518 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1.
network
low complexity
gitlab
7.5
2023-01-27 CVE-2022-4205 Type Confusion vulnerability in Gitlab
In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash.
network
low complexity
gitlab CWE-843
7.5
2023-01-26 CVE-2022-4092 Cross-site Scripting vulnerability in Gitlab 15.6.0
An issue has been discovered in GitLab EE affecting all versions starting from 15.6 before 15.6.1.
network
low complexity
gitlab CWE-79
8.0
2023-01-17 CVE-2022-2251 OS Command Injection vulnerability in Gitlab Runner
Improper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a user who creates a branch with a specially crafted name and gets another user to trigger a pipeline to execute commands in the runner as that other user.
network
low complexity
gitlab CWE-78
8.0
2023-01-12 CVE-2022-3613 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2.
network
low complexity
gitlab
7.5
2023-01-12 CVE-2022-4037 Race Condition vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2.
network
high complexity
gitlab CWE-362
8.5
2023-01-12 CVE-2022-4167 Incorrect Authorization vulnerability in Gitlab
Incorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2 allows group access tokens to continue working even after the group owner loses the ability to revoke them.
network
low complexity
gitlab CWE-863
7.5