Vulnerabilidades de Gitlab
CVEs publicadas que afetam produtos de Gitlab: 279 registro(s), com severidade, exploração e correções.
CVE-2021-39935
Alta · 7.5
KEV Alta · 56 CWE-918 13/12/2021
GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform Server Side Requests via the CI Lint API
CVE-2021-22175
Crítica · 9.8
KEV Alta · 64 Exploit público CWE-918 11/06/2021
GitLab Server-Side Request Forgery (SSRF) Vulnerability
When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is disabled
CVE-2021-22205
Crítica · 10.0
KEV Urgente · 93 Exploit público Ransomware CWE-94 23/04/2021
GitLab Community and Enterprise Editions Remote Code Execution Vulnerability
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.
CVE-2020-14155
Média · 5.3
CWE-190 15/06/2020
Integer Overflow or Wraparound em Pcre
libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.