Gitlab vulnerabilities
Published CVEs affecting Gitlab products: 279 record(s), with severity, exploitation and fixes.
CVE-2021-39935
High · 7.5
KEV High · 56 CWE-918 Dec 13, 2021
GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform Server Side Requests via the CI Lint API
CVE-2021-22175
Critical · 9.8
KEV High · 64 Public exploit CWE-918 Jun 11, 2021
GitLab Server-Side Request Forgery (SSRF) Vulnerability
When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is disabled
CVE-2021-22205
Critical · 10.0
KEV Urgent · 93 Public exploit Ransomware CWE-94 Apr 23, 2021
GitLab Community and Enterprise Editions Remote Code Execution Vulnerability
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.
CVE-2020-14155
Medium · 5.3
CWE-190 Jun 15, 2020
Integer Overflow or Wraparound in Pcre
libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.