Gitlab : Security Vulnerabilities
An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies. This was a bypass of [CVE-2023-3932](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3932) showing additional impact.
| Max Base Score | 9.8 |
| Published | 2023-09-19 |
| Updated | 2023-09-21 |
| EPSS | 0.13% |
An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 in which the projects API pagination can be skipped, potentially leading to DoS on certain instances.
| Max Base Score | 7.5 |
| Published | 2023-09-01 |
| Updated | 2023-09-07 |
| EPSS | 0.05% |
An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 in which any user can read limited information about any project's imports.
| Max Base Score | 5.0 |
| Published | 2023-09-11 |
| Updated | 2023-09-13 |
| EPSS | 0.05% |
An issue has been discovered in GitLab affecting all versions starting from 16.2.0. Committing directories containing LF character results in 500 errors when viewing the commit
| Max Base Score | 5.3 |
| Published | 2023-08-30 |
| Updated | 2023-09-01 |
| EPSS | 0.05% |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. A malicious Maintainer can, under specific circumstances, leak the sentry token by changing the configured URL in the Sentry error tracking settings page. This was as a result of an incomplete fix for CVE-2022-4365.
| Max Base Score | 5.5 |
| Published | 2023-09-01 |
| Updated | 2023-09-07 |
| EPSS | 0.05% |
An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. Due to improper permission validation it was possible to create model experiments in public projects.
| Max Base Score | 5.3 |
| Published | 2023-09-01 |
| Updated | 2023-09-07 |
| EPSS | 0.05% |
An issue has been discovered in GitLab EE affecting all versions from 15.11 prior to 16.2.2 which allows an attacker to spike the resource consumption resulting in DoS.
| Max Base Score | 7.5 |
| Published | 2023-08-02 |
| Updated | 2023-08-04 |
| EPSS | 0.05% |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.9 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible to takeover GitLab Pages with unique domain URLs if the random string added was known.
| Max Base Score | 9.8 |
| Published | 2023-08-03 |
| Updated | 2023-08-07 |
| EPSS | 0.13% |
An issue has been discovered in GitLab EE affecting all versions starting from 14.1 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for EE-licensed users to link any security policy project by its ID to projects or groups the user has access to, potentially revealing the security projects's configured security policies.
| Max Base Score | 6.5 |
| Published | 2023-08-04 |
| Updated | 2023-08-08 |
| EPSS | 0.07% |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible via sending crafted payloads which use ProjectReferenceFilter to the preview_markdown endpoint.
| Max Base Score | 7.5 |
| Published | 2023-08-02 |
| Updated | 2023-08-04 |
| EPSS | 0.05% |
An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Access tokens may have been logged when a query was made to a specific endpoint.
| Max Base Score | 7.5 |
| Published | 2023-08-02 |
| Updated | 2023-08-04 |
| EPSS | 0.12% |
An information disclosure issue in GitLab EE affecting all versions from 16.2 prior to 16.2.5, and 16.3 prior to 16.3.1 allowed other Group Owners to see the Public Key for a Google Cloud Logging audit event streaming destination, if configured. Owners can now only write the key, not read it.
| Max Base Score | 5.5 |
| Published | 2023-09-01 |
| Updated | 2023-09-01 |
| EPSS | 0.05% |
An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies.
| Max Base Score | 6.5 |
| Published | 2023-08-03 |
| Updated | 2023-08-08 |
| EPSS | 0.07% |
An issue has been discovered in GitLab EE affecting all versions starting from 16.1 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. If an external user is given an owner role on any group, that external user may escalate their privileges on the instance by creating a service account in that group. This service account is not classified as external and may be used to access internal projects.
| Max Base Score | 7.2 |
| Published | 2023-09-01 |
| Updated | 2023-09-01 |
| EPSS | 0.07% |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. An invalid 'start_sha' value on merge requests page may lead to Denial of Service as Changes tab would not load.
| Max Base Score | 7.5 |
| Published | 2023-08-02 |
| Updated | 2023-08-04 |
| EPSS | 0.05% |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A reflected XSS was possible when creating specific PlantUML diagrams that allowed the attacker to perform arbitrary actions on behalf of victims.
| Max Base Score | 6.1 |
| Published | 2023-08-02 |
| Updated | 2023-08-04 |
| EPSS | 0.05% |
An issue has been discovered in GitLab EE affecting all versions starting from 12.8 before 15.11.11, all versions starting from 16.0 before 16.0.7, all versions starting from 16.1 before 16.1.2. An attacker could change the name or path of a public top-level group in certain situations.
| Max Base Score | 8.0 |
| Published | 2023-07-21 |
| Updated | 2023-07-31 |
| EPSS | 0.05% |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.3 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows an attacker to merge arbitrary code into protected branches.
| Max Base Score | 6.5 |
| Published | 2023-07-13 |
| Updated | 2023-07-20 |
| EPSS | 0.05% |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.3 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1. A Regular Expression Denial of Service was possible via sending crafted payloads to the preview_markdown endpoint.
| Max Base Score | 7.5 |
| Published | 2023-07-13 |
| Updated | 2023-07-20 |
| EPSS | 0.05% |
An issue has been discovered in GitLab affecting all versions before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. The main branch of a repository with a specially designed name allows an attacker to create repositories with malicious code.
| Max Base Score | 6.5 |
| Published | 2023-08-02 |
| Updated | 2023-08-04 |
| EPSS | 0.05% |
An issue has been discovered in GitLab affecting all versions starting from 8.10 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Under specific circumstances, a user importing a project 'from export' could access and read unrelated files via uploading a specially crafted file. This was due to a bug in `tar`, fixed in [`tar-1.35`](https://lists.gnu.org/archive/html/info-gnu/2023-07/msg00005.html).
| Max Base Score | 6.5 |
| Published | 2023-08-02 |
| Updated | 2023-08-04 |
| EPSS | 0.07% |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible via sending crafted payloads which use AutolinkFilter to the preview_markdown endpoint.
| Max Base Score | 7.5 |
| Published | 2023-08-02 |
| Updated | 2023-08-04 |
| EPSS | 0.05% |
An information disclosure issue in Gitlab CE/EE affecting all versions from 13.6 prior to 15.11.10, all versions from 16.0 prior to 16.0.6, all versions from 16.1 prior to 16.1.1, resulted in the Sidekiq log including webhook tokens when the log format was set to `default`.
| Max Base Score | 3.9 |
| Published | 2023-07-13 |
| Updated | 2023-07-20 |
| EPSS | 0.04% |
An information disclosure issue in GitLab CE/EE affecting all versions from 16.0 prior to 16.0.6, and version 16.1.0 allows unauthenticated actors to access the import error information if a project was imported from GitHub.
| Max Base Score | 5.3 |
| Published | 2023-07-13 |
| Updated | 2023-07-20 |
| EPSS | 0.05% |
An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service when importing or cloning malicious content.
| Max Base Score | 6.5 |
| Published | 2023-09-01 |
| Updated | 2023-09-01 |
| EPSS | 0.04% |