# |
CVE ID
|
CWE ID
|
# of Exploits
|
Vulnerability Type(s)
|
Publish Date
|
Update Date
|
Score
|
Gained Access Level
|
Access
|
Complexity
|
Authentication
|
Conf.
|
Integ.
|
Avail.
|
1 |
CVE-2022-1940 |
79 |
|
Exec Code XSS |
2022-06-06 |
2022-06-13 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
A Stored Cross-Site Scripting vulnerability in Jira integration in GitLab EE affecting all versions from 13.11 prior to 14.9.5, 14.10 prior to 14.10.4, and 15.0 prior to 15.0.1 allows an attacker to execute arbitrary JavaScript code in GitLab on a victim's behalf via specially crafted Jira Issues |
2 |
CVE-2022-1416 |
79 |
|
XSS |
2022-05-19 |
2022-06-02 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
Missing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 allows for rendering of attacker controlled HTML tags and CSS styling |
3 |
CVE-2022-1193 |
863 |
|
|
2022-04-11 |
2022-05-12 |
3.5 |
None |
Remote |
Medium |
??? |
Partial |
None |
None |
Improper access control in GitLab CE/EE versions 10.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows a malicious actor to obtain details of the latest commit in a private project via Merge Requests under certain circumstances |
4 |
CVE-2022-1190 |
79 |
|
XSS |
2022-04-04 |
2022-04-11 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
Improper handling of user input in GitLab CE/EE versions 8.3 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowed an attacker to exploit a stored XSS by abusing multi-word milestone references in issue descriptions, comments, etc. |
5 |
CVE-2022-1157 |
532 |
|
|
2022-04-11 |
2022-04-18 |
3.5 |
None |
Remote |
Medium |
??? |
Partial |
None |
None |
Missing sanitization of logged exception messages in all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 of GitLab CE/EE causes potential sensitive values in invalid URLs to be logged |
6 |
CVE-2022-1124 |
863 |
|
|
2022-05-11 |
2022-05-18 |
3.5 |
None |
Remote |
Medium |
??? |
Partial |
None |
None |
An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0, allowing Guest project members to access trace log of jobs when it is enabled |
7 |
CVE-2022-1111 |
668 |
|
|
2022-04-04 |
2022-04-11 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
A business logic error in Project Import in GitLab CE/EE versions 14.9 prior to 14.9.2, 14.8 prior to 14.8.5, and 14.0 prior to 14.7.7 under certain conditions caused imported projects to show an incorrect user in the 'Access Granted' column in the project membership pages |
8 |
CVE-2022-0549 |
|
|
|
2022-03-28 |
2022-04-04 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under certain conditions, GitLab REST API may allow unprivileged users to add other users to groups even if that is not possible to do through the Web UI. |
9 |
CVE-2022-0489 |
400 |
|
|
2022-04-01 |
2022-04-13 |
3.5 |
None |
Remote |
Medium |
??? |
None |
None |
Partial |
An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was possible to trigger a DOS by using the math feature with a specific formula in issue comments. |
10 |
CVE-2022-0373 |
863 |
|
|
2022-04-01 |
2022-04-12 |
3.5 |
None |
Remote |
Medium |
??? |
Partial |
None |
None |
Improper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4, and 12.6 to 14.7.1 allows project non-members to retrieve the service desk email address |
11 |
CVE-2021-39946 |
79 |
|
XSS |
2022-01-18 |
2022-01-25 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
Improper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed an attacker to exploit XSS by abusing the generation of the HTML code related to emojis |
12 |
CVE-2021-39931 |
269 |
|
|
2021-12-13 |
2021-12-16 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under specific condition an unauthorised project member was allowed to delete a protected branches due to a business logic error. |
13 |
CVE-2021-39927 |
918 |
|
|
2022-01-18 |
2022-04-22 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
Server side request forgery protections in GitLab CE/EE versions between 8.4 and 14.4.4, between 14.5.0 and 14.5.2, and between 14.6.0 and 14.6.1 would fail to protect against attacks sending requests to localhost on port 80 or 443 if GitLab was configured to run on a port other than 80 or 443 |
14 |
CVE-2021-39909 |
347 |
|
Bypass |
2021-11-05 |
2022-05-13 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
Lack of email address ownership verification in the CODEOWNERS feature in all versions of GitLab EE starting from 11.3 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows an attacker to bypass CODEOWNERS Merge Request approval requirement under rare circumstances |
15 |
CVE-2021-39887 |
79 |
|
Exec Code XSS |
2021-10-05 |
2021-10-08 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
A stored Cross-Site Scripting vulnerability in the GitLab Flavored Markdown in GitLab CE/EE version 8.4 and above allowed an attacker to execute arbitrary JavaScript code on the victim's behalf. |
16 |
CVE-2021-39885 |
79 |
|
Exec Code XSS |
2021-10-04 |
2022-05-12 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
A Stored XSS in merge request creation page in all versions of Gitlab EE starting from 13.7 before 14.1.7, all versions starting from 14.2 before 14.2.5, and all versions starting from 14.3 before 14.3.1 allows an attacker to execute arbitrary JavaScript code on the victim's behalf via malicious approval rule names |
17 |
CVE-2021-39881 |
|
|
|
2021-10-05 |
2021-10-09 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
In all versions of GitLab CE/EE since version 7.7, the application may let a malicious user create an OAuth client application with arbitrary scope names which may allow the malicious user to trick unsuspecting users to authorize the malicious client application using the spoofed scope name and description. |
18 |
CVE-2021-39878 |
79 |
|
Exec Code XSS |
2021-10-05 |
2021-10-12 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
A stored Reflected Cross-Site Scripting vulnerability in the Jira integration in GitLab version 13.0 up to 14.3.1 allowed an attacker to execute arbitrary javascript code. |
19 |
CVE-2021-22261 |
79 |
|
Exec Code XSS |
2021-10-05 |
2022-05-12 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
A stored Cross-Site Scripting vulnerability in the Jira integration in all GitLab versions starting from 13.9 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 allows an attacker to execute arbitrary JavaScript code on the victim's behalf via malicious Jira API responses |
20 |
CVE-2021-22260 |
79 |
|
Exec Code XSS |
2021-11-05 |
2022-05-12 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of GitLab CE/EE starting from 13.7 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 allows an attacker to execute arbitrary JavaScript code on the victim's behalf |
21 |
CVE-2021-22254 |
116 |
|
|
2021-08-20 |
2021-08-26 |
3.5 |
None |
Remote |
Medium |
??? |
Partial |
None |
None |
Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9. |
22 |
CVE-2021-22242 |
79 |
|
XSS |
2021-08-25 |
2021-08-31 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
Insufficient input sanitization in Mermaid markdown in GitLab CE/EE version 11.4 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted markdown |
23 |
CVE-2021-22241 |
79 |
|
XSS |
2021-08-05 |
2021-08-12 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0. It was possible to exploit a stored cross-site-scripting via a specifically crafted default branch name. |
24 |
CVE-2021-22238 |
79 |
|
XSS |
2021-08-20 |
2021-08-26 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
An issue has been discovered in GitLab affecting all versions starting with 13.3. GitLab was vulnerable to a stored XSS by using the design feature in issues. |
25 |
CVE-2021-22232 |
74 |
|
|
2021-07-06 |
2021-07-08 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
HTML injection was possible via the full name field before versions 13.11.6, 13.12.6, and 14.0.2 in GitLab CE |
26 |
CVE-2021-22225 |
79 |
|
XSS |
2021-07-07 |
2021-07-09 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
Insufficient input sanitization in markdown in GitLab version 13.11 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted markdown |
27 |
CVE-2021-22220 |
79 |
|
XSS |
2021-06-08 |
2021-12-10 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
An issue has been discovered in GitLab affecting all versions starting with 13.10. GitLab was vulnerable to a stored XSS in blob viewer of notebooks. |
28 |
CVE-2021-22211 |
863 |
|
|
2021-05-06 |
2021-05-13 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7. GitLab Dependency Proxy, under certain circumstances, can impersonate a user resulting in possibly incorrect access handling. |
29 |
CVE-2021-22199 |
79 |
|
XSS |
2021-04-22 |
2021-04-30 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored XSS if scoped labels were used. |
30 |
CVE-2021-22196 |
79 |
|
XSS |
2021-04-02 |
2021-04-07 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4. It was possible to exploit a stored cross-site-scripting in merge request via a specifically crafted branch name. |
31 |
CVE-2021-22193 |
209 |
|
|
2021-03-24 |
2021-03-26 |
3.5 |
None |
Remote |
Medium |
??? |
Partial |
None |
None |
An issue has been discovered in GitLab affecting all versions starting with 7.1. A member of a private group was able to validate the use of a specific name for private project. |
32 |
CVE-2021-22185 |
79 |
|
XSS |
2021-03-24 |
2021-03-26 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
Insufficient input sanitization in wikis in GitLab version 13.8 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted commit to a wiki |
33 |
CVE-2021-22183 |
79 |
|
XSS |
2021-03-04 |
2021-03-10 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
An issue has been discovered in GitLab affecting all versions starting with 11.8. GitLab was vulnerable to a stored XSS in the epics page, which could be exploited with user interactions. |
34 |
CVE-2021-22182 |
79 |
|
XSS |
2021-03-03 |
2021-03-04 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
An issue has been discovered in GitLab affecting all versions starting with 13.7. GitLab was vulnerable to a stored XSS in merge request. |
35 |
CVE-2020-26407 |
79 |
|
XSS |
2020-12-10 |
2020-12-11 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
A XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6 before 13.6.2 that allows an attacker to perform cross-site scripting to other users via importing a malicious project |
36 |
CVE-2020-13345 |
79 |
|
XSS |
2020-10-06 |
2020-10-15 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
An issue has been discovered in GitLab affecting all versions starting from 10.8. Reflected XSS on Multiple Routes |
37 |
CVE-2020-13340 |
79 |
|
XSS |
2020-10-08 |
2020-10-14 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI Job Log |
38 |
CVE-2020-13338 |
79 |
|
XSS |
2020-10-02 |
2020-10-08 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
An issue has been discovered in GitLab affecting versions prior to 12.10.13, 13.0.8, 13.1.2. A stored cross-site scripting vulnerability was discovered when editing references. |
39 |
CVE-2020-13337 |
79 |
|
XSS |
2020-10-02 |
2020-10-08 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
An issue has been discovered in GitLab affecting versions from 12.10 to 12.10.12 that allowed for a stored XSS payload to be added as a group name. |
40 |
CVE-2020-13336 |
79 |
|
XSS |
2020-09-30 |
2020-10-08 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
An issue has been discovered in GitLab affecting versions from 11.8 before 12.10.13. GitLab was vulnerable to a stored XSS by in the error tracking feature. |
41 |
CVE-2020-13331 |
79 |
|
XSS |
2020-09-30 |
2020-10-02 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS by in the Wiki pasges. |
42 |
CVE-2020-13330 |
79 |
|
XSS |
2020-09-30 |
2020-10-02 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS in import the Bitbucket project feature. |
43 |
CVE-2020-13329 |
79 |
|
XSS |
2020-09-30 |
2020-10-02 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
An issue has been discovered in GitLab affecting versions from 12.6.2 prior to 12.10.13. GitLab was vulnerable to a stored XSS by in the blob view feature. |
44 |
CVE-2020-13328 |
79 |
|
XSS |
2020-09-30 |
2020-10-02 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. GitLab was vulnerable to a stored XSS by using the PyPi files API. |
45 |
CVE-2020-13326 |
|
|
Bypass |
2020-09-30 |
2020-10-02 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the restriction for Github project import could be bypassed. |
46 |
CVE-2020-13324 |
|
|
|
2020-09-30 |
2020-10-08 |
3.5 |
None |
Remote |
Medium |
??? |
Partial |
None |
None |
A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the private activity of a user could be exposed via the API. |
47 |
CVE-2020-13301 |
79 |
|
XSS |
2020-09-14 |
2020-09-16 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was vulnerable to a stored XSS on the standalone vulnerability page. |
48 |
CVE-2020-13288 |
79 |
|
XSS |
2020-08-12 |
2020-08-14 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
In GitLab before 13.0.12, 13.1.6, and 13.2.3, a stored XSS vulnerability exists in the CI/CD Jobs page |
49 |
CVE-2020-13285 |
79 |
|
XSS |
2020-08-13 |
2021-05-03 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting (XSS) vulnerability exists in the issue reference number tooltip. |
50 |
CVE-2020-13283 |
79 |
|
XSS |
2020-08-13 |
2020-08-14 |
3.5 |
None |
Remote |
Medium |
??? |
None |
Partial |
None |
For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the issues list via milestone title. |