Gitlab Vulnerabilidades

Curso de tempo

Tipo

Bug Tracking Software	769

Produto

GitLab Enterprise Edition	711
GitLab Community Edition	578
GitLab Community	19
GitLab Enterprise	19
GitLab DAST Analyzer	3

Medidas

Official Fix	504
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	265

Explorabilidade

High	1
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	768

Tipo de acesso

Not Defined	0
Physical	0
Local	9
Adjacent	12
Network	748

Autenticação

Not Defined	0
High	65
Low	381
None	323

Actividade do utilizador

Not Defined	0
Required	157
None	612

C3BM Index

CVSSv3 Base

≤1	0
≤2	1
≤3	8
≤4	69
≤5	192
≤6	236
≤7	167
≤8	60
≤9	34
≤10	2

CVSSv3 Temp

≤1	0
≤2	1
≤3	14
≤4	65
≤5	196
≤6	243
≤7	157
≤8	64
≤9	29
≤10	0

VulDB

≤1	0
≤2	6
≤3	37
≤4	102
≤5	237
≤6	169
≤7	107
≤8	108
≤9	3
≤10	0

NVD

≤1	0
≤2	0
≤3	2
≤4	11
≤5	87
≤6	127
≤7	104
≤8	104
≤9	31
≤10	35

CNA

≤1	0
≤2	2
≤3	15
≤4	35
≤5	94
≤6	60
≤7	48
≤8	27
≤9	18
≤10	12

Fabricante

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explorar 0 dia

<1k	116
<2k	484
<5k	168
<10k	0
<25k	1
<50k	0
<100k	0
≥100k	0

Explorar hoje

<1k	756
<2k	13
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explorar o volume do mercado

🔴 CTI Actividades

Affected Products (13): Community (19), Community Edition (578), DAST API Scanner (1), DAST Analyzer (3), Enterprise (19), Enterprise Edition (713), GitLab (1), Omnibus (1), Remote Development (1), Runner (3), and Enterprise Edition (1), and gitlab-shell (1), gitlab-vscode-extension (1)

Link to Vendor Website: https://gitlab.com/

Publicado em	Base	Temp	Vulnerabilidade	Prod	Exp	Mas	EPSS	CTI	CVE
25/04/2024	6.4	6.3	GitLab Community Edition/Enterprise Edition Bitbucket Credentials Fraca autenticação	Bug Tracking Software	Not Defined	Official Fix	0.00000	1.38-	CVE-2024-4024
25/04/2024	4.3	4.2	GitLab Community Edition/Enterprise Edition GraphQL Subscription direitos alargados	Bug Tracking Software	Not Defined	Official Fix	0.00000	0.52-	CVE-2024-4006
25/04/2024	7.4	7.2	GitLab Community Edition/Enterprise Edition Directório Traversal	Bug Tracking Software	Not Defined	Official Fix	0.00000	0.76-	CVE-2024-2434
25/04/2024	4.3	4.2	GitLab Community Edition/Enterprise Edition Email Address direitos alargados	Bug Tracking Software	Not Defined	Official Fix	0.00000	0.57-	CVE-2024-1347
25/04/2024	7.5	7.3	GitLab Community Edition/Enterprise Edition Wildcard Filter Negação de Serviço	Bug Tracking Software	Not Defined	Official Fix	0.00000	0.43-	CVE-2024-2829
12/04/2024	4.3	4.2	GitLab Community Edition/Enterprise Edition Chat Integration Negação de Serviço	Bug Tracking Software	Not Defined	Official Fix	0.00043	0.04	CVE-2023-6489
12/04/2024	6.1	6.0	GitLab Community Edition/Enterprise Edition Diff Viewer Roteiro Cruzado de Sítios	Bug Tracking Software	Not Defined	Official Fix	0.00043	0.02	CVE-2024-3092
12/04/2024	6.1	6.0	GitLab Community Edition/Enterprise Edition Autocomplete Roteiro Cruzado de Sítios	Bug Tracking Software	Not Defined	Official Fix	0.00043	0.04	CVE-2024-2279
12/04/2024	4.3	4.2	GitLab Enterprise Edition junit Test Report File Negação de Serviço	Bug Tracking Software	Not Defined	Official Fix	0.00043	0.06	CVE-2023-6678
28/03/2024	6.1	6.0	GitLab Community Edition/Enterprise Edition Wiki Page Roteiro Cruzado de Sítios	Bug Tracking Software	Not Defined	Official Fix	0.00043	0.08	CVE-2023-6371
28/03/2024	4.3	4.2	GitLab Community Edition/Enterprise Edition Label Negação de Serviço	Bug Tracking Software	Not Defined	Official Fix	0.00065	0.00	CVE-2024-2818
22/02/2024	6.1	6.0	GitLab Community Edition/Enterprise Edition User Profile Page Roteiro Cruzado de Sítios	Bug Tracking Software	Not Defined	Official Fix	0.00068	0.00	CVE-2024-1451
22/02/2024	4.8	4.7	GitLab Community Edition/Enterprise Edition Secondary Email direitos alargados	Bug Tracking Software	Not Defined	Official Fix	0.00046	0.05	CVE-2024-1525
22/02/2024	4.3	4.2	GitLab Enterprise Edition Custom Dashboard Projects Setting direitos alargados	Bug Tracking Software	Not Defined	Official Fix	0.00045	0.05	CVE-2024-0861
22/02/2024	5.7	5.6	GitLab Enterprise Edition Group direitos alargados	Bug Tracking Software	Not Defined	Official Fix	0.00068	0.04	CVE-2023-6477
22/02/2024	4.3	4.2	GitLab Enterprise Edition Setting direitos alargados	Bug Tracking Software	Not Defined	Official Fix	0.00045	0.05	CVE-2023-4895
13/02/2024	5.6	5.5	GitLab Enterprise Edition Group Access Token direitos alargados	Bug Tracking Software	Not Defined	Official Fix	0.00068	0.04	CVE-2024-1250
08/02/2024	5.9	5.8	GitLab Enterprise Edition Protected Branch direitos alargados	Bug Tracking Software	Not Defined	Official Fix	0.00046	0.04	CVE-2023-6564
08/02/2024	5.7	5.6	GitLab Enterprise Edition Protected Branch direitos alargados	Bug Tracking Software	Not Defined	Official Fix	0.00045	0.02	CVE-2023-6840
08/02/2024	5.4	5.3	GitLab Enterprise Edition CODEOWNERS File Negação de Serviço	Bug Tracking Software	Not Defined	Official Fix	0.00044	0.05	CVE-2023-6736
08/02/2024	5.4	5.3	GitLab Enterprise Edition GraphQL vulnerabilitiesCountByDay Negação de Serviço	Bug Tracking Software	Not Defined	Official Fix	0.00044	0.00	CVE-2024-1066
26/01/2024	8.1	7.9	GitLab Community Edition/Enterprise Edition Workspace Directório Traversal	Bug Tracking Software	Not Defined	Official Fix	0.00068	0.04	CVE-2024-0402
26/01/2024	5.1	5.1	GitLab Community Edition/Enterprise Edition API PUT Request Roteiro Cruzado de Sítios	Bug Tracking Software	Not Defined	Official Fix	0.00218	0.00	CVE-2023-5933
26/01/2024	5.4	5.3	GitLab Community Edition/Enterprise Edition Cargo.toml Negação de Serviço	Bug Tracking Software	Not Defined	Official Fix	0.00049	0.02	CVE-2023-6159
12/01/2024	8.2	8.1	GitLab Community Edition/Enterprise Edition direitos alargados	Bug Tracking Software	Not Defined	Official Fix	0.00068	0.05	CVE-2023-5356

744 as entradas adicionais não são mais exibidas

🔒 Login Required

You need to signup and login to see more of the remaining 744 results.

◂ VoltarVisão GeralPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!