GitLab Community and Enterprise Editions Vulnerabilities

CVE security advisories and vulnerability history for GitLab Community and Enterprise Editions by GitLab.

13

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

With known exploit

N/A

Avg CVSS

2018–2018

Last updated March 22, 2018

Overview

GitLab Community and Enterprise Editions has 13 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit.

This page aggregates every publicly disclosed vulnerability (CVE) affecting GitLab Community and Enterprise Editions, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Affected versions and CVEs

Browse every GitLab Community and Enterprise Editions version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

10.2.0 - 10.2.5 Fixed in 10.2.612 CVEs
10.3.0 - 10.3.3 Fixed in 10.3.412 CVEs
9.1.0 - 10.1.5 Fixed in 10.1.65 CVEs
10.1.0 - 10.1.5 Fixed in 10.1.62 CVEs
8.10.6 - 10.1.5 Fixed in 10.1.62 CVEs
8.9 - 10.1.5 Fixed in 10.1.62 CVEs
9.1.0 - 10.0.5 Fixed in 10.0.52 CVEs
8.4.0 - 10.1.5 Fixed in 10.1.61 CVE

Find a version

13 CVEs

Sort

Vulnerability · 2018-03-22
CVE-2017-0920CWE-639
Unscored
EPSS 0.1% (26th pct)2018-03-22
Vulnerability · 2018-03-21
CVE-2018-3710CWE-377
Unscored
EPSS 4.2% (89th pct)2018-03-21
Vulnerability · 2018-03-21
CVE-2017-0927CWE-285
Unscored
EPSS 0.1% (26th pct)2018-03-21
Vulnerability · 2018-03-21
CVE-2017-0926CWE-285
Unscored
EPSS 0.3% (55th pct)2018-03-21
Vulnerability · 2018-03-21
CVE-2017-0925CWE-522
Unscored
EPSS 0.1% (28th pct)2018-03-21
Vulnerability · 2018-03-21
CVE-2017-0924CWE-79
Unscored
EPSS 0.1% (23th pct)2018-03-21
Vulnerability · 2018-03-21
CVE-2017-0923CWE-79
Unscored
EPSS 0.1% (23th pct)2018-03-21
Vulnerability · 2018-03-21
CVE-2017-0922CWE-639
Unscored
EPSS 0.1% (24th pct)2018-03-21
Vulnerability · 2018-03-21
CVE-2017-0918CWE-23
Unscored
EPSS 6.2% (91th pct)2018-03-21
Vulnerability · 2018-03-21
CVE-2017-0917CWE-79
Unscored
EPSS 0.1% (24th pct)2018-03-21
Vulnerability · 2018-03-21
CVE-2017-0916CWE-77
Unscored
EPSS 0.4% (63th pct)2018-03-21
Vulnerability · 2018-03-21
CVE-2017-0915CWE-77
Unscored
EPSS 1.2% (79th pct)2018-03-21
Vulnerability · 2018-03-21
CVE-2017-0914CWE-89
Unscored
EPSS 0.2% (38th pct)2018-03-21

Common weakness types

The CWE weakness categories most often found in GitLab Community and Enterprise Editions CVEs. Follow any weakness for its full explanation.

Other GitLab products

Browse vulnerabilities for other products by GitLab.

GitLab1,425 CVEs GitLab EE48 CVEs GitLab CE32 CVEs GitLab CE/EE28 CVEs GitLab Runner6 CVEs gitlab-shell5 CVEs dynamic application security testing analyzer4 CVEs GitLab Enterprise Edition4 CVEs

All GitLab vulnerabilities

Frequently asked questions

Common questions about GitLab Community and Enterprise Editions vulnerabilities.

How many CVEs does GitLab GitLab Community and Enterprise Editions have?

GitLab GitLab Community and Enterprise Editions has 13 published CVE records since 2018.

How many GitLab GitLab Community and Enterprise Editions CVEs are in CISA KEV?

None of GitLab GitLab Community and Enterprise Editions's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for GitLab GitLab Community and Enterprise Editions vulnerabilities?

No GitLab GitLab Community and Enterprise Editions CVEs currently have a tracked public exploit in this dataset.

Which versions of GitLab GitLab Community and Enterprise Editions are affected?

8 distinct GitLab GitLab Community and Enterprise Editions versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in GitLab GitLab Community and Enterprise Editions CVEs?

GitLab GitLab Community and Enterprise Editions's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-285 (Improper Authorization).

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track GitLab Community and Enterprise Editions vulnerabilities

Monitor new GitLab Community and Enterprise Editions vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing