GitLab CE/EE 未授权 拒绝服务漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.hkcert.org/tc/security-bulletin/gitlab-multiple-vulnerabilities_20260122
• https://nic.seu.edu.cn/info/1047/1210.htm
• https://www.nsfocus.net/vulndb/122629
• https://www.tenablecloud.cn/plugins/nessus/187605
• https://www.secrss.com/articles/35703
• https://lic.nuk.edu.tw/p/406-1012-86665,r73.php?Lang=zh-tw
• https://www.kjintelligent.com/hot_529448.html
• https://www.ithome.com.tw/news/173259
• https://hisecure.hinet.net/secureinfo/popup2.php?cert_id=HiNet-2026-0009
• https://www.anquanke.com/post/id/313477
• https://avd.aliyun.com/detail?id=AVD-2022-3482
• https://www.sentinelone.com/vulnerability-database/cve-2026-8280/
• https://ta0ing.github.io/article/659abcc5.html
• https://saucer-man.com/information-security/846.html
• https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-0-2-released/
• https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-5-1-released/
• https://docs.gitlab.com/releases/patches/patch-release-gitlab-17-5-2-released/
• https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-10-1-released/
• https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-4-1-released/
• https://docs.gitlab.com/releases/patches/patch-release-gitlab-17-11-1-released/
• https://docs.gitlab.com/releases/patches/patch-release-gitlab-17-6-1-released/
• https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-0-1-released/
• https://nvd.nist.gov/vuln/detail/CVE-2026-1102
• https://nvd.nist.gov/vuln/detail/CVE-2025-8099
• https://nvd.nist.gov/vuln/detail/CVE-2023-6386
• https://nvd.nist.gov/vuln/detail/cve-2023-2030
• https://nvd.nist.gov/vuln/detail/CVE-2025-4700
• https://nvd.nist.gov/vuln/detail/CVE-2025-0475
• https://nvd.nist.gov/vuln/detail/cve-2023-6489
• https://nvd.nist.gov/vuln/detail/CVE-2025-10004
• https://nvd.nist.gov/vuln/detail/CVE-2026-3988
• https://nvd.nist.gov/vuln/detail/CVE-2026-6713
• https://nvd.nist.gov/vuln/detail/cve-2021-39935
• https://nvd.nist.gov/vuln/detail/cve-2026-6515
• https://nvd.nist.gov/vuln/detail/cve-2026-1182
• https://nvd.nist.gov/vuln/detail/cve-2025-13927
• https://nvd.nist.gov/vuln/detail/cve-2026-3857
• https://nvd.nist.gov/vuln/detail/cve-2026-4363
• https://nvd.nist.gov/vuln/detail/cve-2026-1069
• https://nvd.nist.gov/vuln/detail/cve-2026-1751
• https://github.com/advisories/GHSA-v488-9cvj-5mx7
• https://www.sentinelone.com/vulnerability-database/cve-2026-8280/
• https://app.opencve.io/cve/?page=10&vendor=gitlab

Related Vulnerabilities

• PoCCVE-2026-85706: GitLab CE/EE <=19.1.7/19.2.5/19.3.1 - Arbitrary File Read
• GitLab CE/EE /api/graphql 未授权访问漏洞（CVE-2026-19478）
• PoCCVE-2026-19478: GitLab CE/EE - GraphQL @gl_introduced Arbitrary Method Invocation
• PoCCVE-2021-22175: GitLab CI Lint API - Server-Side Request Forgery
• GitLab GitLab CE/EE 权限管理不当漏洞
• GitLab CE/EE GraphQL 身份验证缺陷漏洞
• GitLab CE/EE 资源分配控制不当漏洞 可导致拒绝服务
• gitlab-api-user-enum: GitLab - User Information Disclosure Via Open API
• PoCCVE-2024-45409: GitLab - SAML Authentication Bypass
• PoCCVE-2025-25291: GitLab - SAML Authentication Bypass
• PoCCVE-2019-6793: GitLab Enterprise Edition - Server-Side Request Forgery
• PoCCVE-2020-2096: Jenkins Gitlab Hook <=1.4.2 - Cross-Site Scripting
• PoCCVE-2020-26413: Gitlab CE/EE 13.4 - 13.6.2 - Information Disclosure