GitLab Vulnerabilities
93 vulnerabilities related to GitLab
- PoC2026-08-19CVE-2026-19478: GitLab CE/EE - GraphQL @gl_introduced Arbitrary Method Invocation
- PoC2026-01-08CVE-2021-22175: GitLab CI Lint API - Server-Side Request Forgery
- 2025-10-11GitLab GitLab CE/EE 权限管理不当漏洞
- 2025-10-09GitLab CE/EE GraphQL 身份验证缺陷漏洞
- 2025-09-26GitLab CE/EE 资源分配控制不当漏洞 可导致拒绝服务
- 2025-09-01gitlab-api-user-enum: GitLab - User Information Disclosure Via Open API
- PoC2025-08-01CVE-2024-45409: GitLab - SAML Authentication Bypass
- PoC2025-08-01CVE-2025-25291: GitLab - SAML Authentication Bypass
- PoC2025-08-01CVE-2019-6793: GitLab Enterprise Edition - Server-Side Request Forgery
- PoC2025-08-01CVE-2020-2096: Jenkins Gitlab Hook <=1.4.2 - Cross-Site Scripting
- PoC2025-08-01CVE-2020-26413: Gitlab CE/EE 13.4 - 13.6.2 - Information Disclosure
- PoC2025-08-01CVE-2021-22205: GitLab CE/EE - Remote Code Execution
- PoC2025-08-01CVE-2021-22214: Gitlab CE/EE 10.5 - Server-Side Request Forgery
- PoC2025-08-01CVE-2021-4191: GitLab GraphQL API User Enumeration
- PoC2025-08-01CVE-2022-0735: GitLab CE/EE - Information Disclosure
- PoC2025-08-01CVE-2022-1162: GitLab CE/EE - Hard-Coded Credentials
- PoC2025-08-01CVE-2022-2185: GitLab CE/EE - Remote Code Execution
- PoC2025-08-01CVE-2023-2825: GitLab 16.0.0 - Path Traversal
- PoC2025-08-01CVE-2023-7028: GitLab - Account Takeover via Password Reset
- PoC2025-08-01CVE-2020-26413: GitLab Information Disclosure
- PoC2025-08-01CVE-2021-22205: GitLab CE/EE Unauthenticated RCE Using ExifTool
- PoC2025-08-01CVE-2021-22214: Unauthenticated Gitlab SSRF - CI Lint API
- PoC2025-08-01gitlab-weak-login: Gitlab Default Login
- PoC2025-08-01gitlab-public-snippets: GitLab public snippets
- PoC2025-08-01gitlab-uninitialized-password: Uninitialized GitLab instances
- PoC2025-08-01gitlab-page-csp-bypass: Content-Security-Policy Bypass - GitLab Page
- PoC2025-08-01gitlab-login-check-self-hosted: Gitlab Login Check Self Hosted
- PoC2025-08-01gitlab-weak-login: Gitlab Default Login
- PoC2025-08-01gitlab-ci-yml: GitLab CI YAML - Exposure
- PoC2025-08-01gitlab-personal-token: GitLab Personal Access Token
- PoC2025-08-01gitlab-api-user-enum: GitLab - User Information Disclosure Via Open API
- PoC2025-08-01gitlab-uninitialized-password: Uninitialized GitLab instances
- PoC2025-08-01gitlab-rce: GitLab CE/EE Unauthenticated RCE Using ExifTool
- PoC2025-08-01gitlab-panel: GitLab Panel
- 2024-12-10GitLab 权限提升漏洞
- 2024-11-27GitLab CE/EE 权限管理不当漏洞 可导致敏感信息泄露
- 2024-11-27GitLab CE/EE 输入验证不当漏洞 可导致拒绝服务
- 2024-11-27GitLab CE/EE 需授权 访问控制不当漏洞 可导致权限提升
- 2024-11-14GitLab CE/EE 需授权 访问控制不当漏洞
- 2024-10-25GitLab /users/sign_in 默认口令漏洞
- 2024-10-25GitLab /users/sign_in 默认口令漏洞
- 2024-10-10GitLab EE 需授权 访问控制不当漏洞
- 2024-10-10GitLab CE/EE 需授权 身份验证缺陷漏洞
- 2024-10-10GitLab EE 需授权 服务端请求伪造漏洞
- 2024-10-10GitLab CE/EE 需授权 输入验证不当漏洞
- 2024-10-10GitLab CE/EE 需授权 跨站脚本漏洞
- 2024-09-26GitLab EE 需授权 输入验证不当漏洞 可导致敏感信息泄露
- 2024-09-19Gitlab SAML 身份认证绕过漏洞
- 2024-09-12GitLab CE/EE 未授权 拒绝服务漏洞
- 2024-09-12GitLab EE 需授权 代码注入漏洞
- 2024-09-12GitLab CE/EE 权限管理不当漏洞
- 2024-08-14GitLab社区与企业版Label Color存储型跨站脚本漏洞
- 2024-07-11Gitlab 访问控制不当漏洞
- 2024-06-29GitLab 身份验证缺陷
- 2024-05-31GitLab Community and Enterprise Edition Web IDE 存储型XSS漏洞
- 2024-04-03Gitlab 未授权访问漏洞
- 2024-04-03Gitlab 未授权访问漏洞
- 2024-03-21GitLab Community and Enterprise Edition CVE-2023-0921 拒绝服务漏洞
- 2024-03-14GitLab CE/EE 任意用户密码重置漏洞
- 2024-02-29GitLab Community and Enterprise Edition 拒绝服务漏洞
- 2024-02-22Gitlab CVE-2022-1162 认证绕过漏洞
- 2024-02-22GitLab CE/EE CVE-2022-3572 跨站脚本漏洞
- 2024-02-22GitLab社区和企业版笔记存储型跨站脚本漏洞
- 2024-02-22GitLab Community and Enterprise Edition GitHub Import 远程代码执行漏洞
- 2024-02-22GitLab社区和企业版Milestone References跨站脚本漏洞
- 2024-02-22GitLab Community and Enterprise Edition GitHub Import CVE-2022-2992 远程代码执行漏洞
- 2024-02-22GitLab 社区和企业版 Project Settings 存储型XSS漏洞
- 2024-02-22GitLab EE/CE CVE-2022-3486 重定向漏洞
- 2024-02-22Jenkins Plugin GitLab 存储型跨站脚本漏洞
- 2024-02-22GitLab CVE-2022-2185 远程代码执行漏洞
- 2024-02-22GitLab CVE-2022-2185 远程代码执行漏洞
- 2024-02-07GitLab CE/EE CVE-2022-3573 跨站脚本漏洞
- 2024-02-07GitLab CVE-2023-2825任意文件读取漏洞
- 2024-02-07GitLab Community and Enterprise Edition Merge Requests 存储型跨站脚本漏洞
- 2024-01-11GitLab 任意用户密码重置漏洞(CVE-2023-7028)
- 2023-09-29(CVE-2023-3906) GitLab EE资产代理输入验证绕过漏洞
- 2023-09-29Gitlab 安全漏洞(CVE-2023-3914)
- 2023-08-02Gitlab 跨站脚本攻击漏洞(CVE-2023-3500)
- 2023-05-24GitLab 路径遍历漏洞(CVE-2023-2825)
- 2022-10-17（CVE-2022-2992）GitLab CE/EE 远程代码执行漏洞
- 2022-09-06GitLab CE/EE import api 远程代码执行漏洞
- 2022-08-24GitLab CE/EE import api 远程代码执行漏洞
- 2022-07-06Gitlab Project import 远程代码执行漏洞
- 2022-04-04gitlabgitlab 使用硬编码凭据漏洞
- 2021-12-10Gitlab Wiki API 远程命令执行漏洞(CVE-2018-18649)
- 2021-11-01GitLab 远程命令执行漏洞（CVE-2021-22205）
- 2021-07-01gitlab commit 邮箱信息泄露
- 2021-06-24Gitlab CI lint API 前台SSRF(CVE-2021-22214)
- 2021-03-25Gitlab markdown 远程代码执行漏洞
- 2021-03-10GitLab Graphql邮箱信息泄露漏洞(CVE-2020-26413)
- 2014-05-13GitLab gitlab-shell Repository Import Feature 远程代码执行漏洞
- 2014-05-13GitLab gitlab-shell ‘SSH key upload’功能远程代码执行漏洞
- 2014-05-12GitLab 远程代码执行漏洞