GitLab - CVE CyberSecurity Database News (Page 15)

Jul 13, 2023 Exploit GitLab

CVE-2023-2576 - How a GitLab Bug Let Developers Bypass CODEOWNERS and Merge to Protected Branches

Published: July 2024 Introduction In mid-2023, a significant security issue—CVE-2023-2576—was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE). This vulnerability broke

Jul 11, 2023 API Exploit GitLab

CVE-2023-1936 - How GitLab’s Service Desk Leaked User Emails (With Exploit Example)

If you're running a DevOps workflow using GitLab, CVE-2023-1936 should be on your radar. This vulnerability lets attackers grab the email addresses of

Jun 7, 2023 XSS GitLab

CVE-2023-2442 - Exploiting Stored XSS in GitLab Merge Requests

In early 2023, security researchers discovered a critical client-side vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE). Tracked as CVE-2023-2442, this flaw allows

Jun 6, 2023 API API Security Exploit GraphQL GitLab

CVE-2023-0921 - How a Simple Oversight in GitLab’s GraphQL API Can Lead to DoS—With Code Examples and Exploit Details

CVE-2023-0921 reveals a denial-of-service (DoS) flaw in GitLab Community/Enterprise Editions. Authenticated users could abuse the GraphQL API to create Issue descriptions of massive size—

May 26, 2023 Exploit GitLab

CVE-2023-2825 - Critical Path Traversal in GitLab CE/EE 16..—How Attackers Can Read Any Server File

In early 2023, a severe vulnerability was uncovered in GitLab Community Edition (CE) and Enterprise Edition (EE)—specifically version 16... Catalogued as CVE-2023-2825, this path