Skip to content
Fencer Intel

All · GitLab

Newest first, late arrivals on top. Also a feed.

  1. 4.3
    CVE-2022-1193 Improper access control in GitLab CE/EE versions 10.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows a malicious ac…
    GitLabbitnami
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  2. 8.7
    CVE-2022-1190 Improper handling of user input in GitLab CE/EE versions 8.3 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowed an att…
    GitLabbitnami
    EPSS 87.9% chance of exploitation in 30 days, percentile 99.7%
  3. 8.7
    CVE-2022-1175 Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versi…
    GitLabbitnami
    1 public exploit EPSS 82.0% chance of exploitation in 30 days, percentile 99.6%
  4. 9.1
    CVE-2022-1162 A hardcoded password was set for accounts registered using an OmniAuth provider (e.g.
    GitLabbitnami
    1 public exploit EPSS 75.6% chance of exploitation in 30 days, percentile 99.5%
  5. 5.3
    CVE-2022-1148 Improper authorization in GitLab Pages included with GitLab CE/EE affecting all versions from 11.5 prior to 14.7.7, 14.8 prior to 14.8.5, a…
    GitLabbitnami
    EPSS 1.5% chance of exploitation in 30 days, percentile 74%
  6. 5.3
    CVE-2022-1121 A lack of appropriate timeouts in GitLab Pages included in GitLab CE/EE all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior…
    GitLabbitnami
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  7. 2.4
    CVE-2022-1111 A business logic error in Project Import in GitLab CE/EE versions 14.9 prior to 14.9.2, 14.8 prior to 14.8.5, and 14.0 prior to 14.7.7 unde…
    GitLabbitnami
  8. 6.5
    CVE-2022-1185 A denial of service vulnerability when rendering RDoc files in GitLab CE/EE versions 10 to 14.7.7, 14.8.0 to 14.8.5, and 14.9.0 to 14.9.2 a…
    GitLabbitnami
    EPSS 1.3% chance of exploitation in 30 days, percentile 71%
  9. 4.8
    CVE-2022-1120 Missing filtering in an error message in GitLab CE/EE affecting all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.…
    GitLabbitnami
    EPSS 1.2% chance of exploitation in 30 days, percentile 67%
  10. 4.3
    CVE-2022-1174 A potential DoS vulnerability was discovered in Gitlab CE/EE versions 13.7 before 14.7.7, all versions starting from 14.8 before 14.8.5, al…
    GitLabbitnami
    EPSS 1.5% chance of exploitation in 30 days, percentile 74%
  11. 3.7
    CVE-2022-1188 An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 14.7.7, all versions starting from 14.8 befor…
    GitLabbitnami
    EPSS 1.4% chance of exploitation in 30 days, percentile 72%
  12. 4.3
    CVE-2022-1105 An improper access control vulnerability in GitLab CE/EE affecting all versions from 13.11 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9…
    GitLabbitnami
  13. 4.3
    CVE-2022-1099 Adding a very large number of tags to a runner in GitLab CE/EE affecting all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior…
    GitLabbitnami
  14. 4.3
    CVE-2022-1100 A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 13.1 prior to 14.7.7, 14.8.0 prior to 14.8.5, and…
    GitLabbitnami
    EPSS 1.0% chance of exploitation in 30 days, percentile 64%
  15. 3.1
    CVE-2022-1189 An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.2 before 14.7.7, all versions starting from 14.8 befor…
    GitLabbitnami
  16. 3.1
    CVE-2022-0740 Incorrect authorization in the Asana integration's branch restriction feature in all versions of GitLab CE/EE starting from version 7.8.0 b…
    GitLabbitnami
  17. 5.8
    CVE-2022-0741 Improper input validation in all versions of GitLab CE/EE using sendmail to send emails allowed an attacker to steal environment variables…
    GitLabbitnami
    EPSS 1.5% chance of exploitation in 30 days, percentile 74%
  18. 5.4
    CVE-2022-0425 A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE/EE since version 7.9 allows an attacker to…
    GitLabbitnami
  19. 6.5
    CVE-2021-39908 In all versions of GitLab CE/EE starting from 0.8.0 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting…
    GitLabbitnami
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  20. 4.3
    CVE-2022-0373 Improper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4, and 12.6 to 14.7.1 allows project non-members to retrieve…
    GitLabbitnami
  21. 4.3
    CVE-2022-0390 Improper access control in Gitlab CE/EE versions 12.7 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1 allowed for project non-members to retr…
    GitLabbitnami
  22. 3.5
    CVE-2022-0489 An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was possible to trigger a DOS by using the math…
    GitLabbitnami
    EPSS 1.5% chance of exploitation in 30 days, percentile 74%
  23. 5.3
    CVE-2021-4191 An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2.
    GitLabbitnami
    1 public exploit EPSS 80.5% chance of exploitation in 30 days, percentile 99.6%
  24. 4.7
    CVE-2022-0283 An issue has been discovered affecting GitLab versions prior to 13.5.
    GitLabbitnami
  25. 5.4
    CVE-2022-0136 A vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1.
    GitLabbitnami
  26. 4.3
    CVE-2021-39876 In all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee discloses the members of private groups.
    GitLabbitnami
  27. 3.5
    CVE-2022-0488 An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10.
    GitLabbitnami
  28. 3.1
    CVE-2022-0344 An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting from 10.1 before 14.6…
    GitLabbitnami
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  29. 3.1
    CVE-2022-0249 A vulnerability was discovered in GitLab starting with version 12.
    GitLabbitnami
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  30. 5.9
    CVE-2022-0123 An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1.
    GitLabbitnami