Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GitLab — Vulnerabilities & Security Advisories 1083

All 1083 CVE vulnerabilities found in GitLab, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting GitLab, organized by vendor, product, and Common Weakness Enumeration (CWE) classification tags. It collects a comprehensive history of disclosed issues, spanning the full period during which GitLab has been commercially available, including both open-source and self-managed enterprise editions. Readers can use this resource to track the vendor's published security advisories, understand the frequency and severity trends of specific weakness classes, and review the complete vulnerability timeline for the GitLab platform. The data presented helps security teams identify recurring patterns, such as memory corruption or authentication flaws, without requiring individual lookups of separate CVE records. By consolidating these records, the page provides a structured overview of the product’s security posture, facilitating risk assessment and comparative analysis against other systems.

Vendor: GitLab

CVE ID Title CVSS Severity Published
CVE-2023-4379 Incorrect Authorization in GitLab CWE-863 8.1 High 2023-11-09
CVE-2023-4700 Missing Authorization in GitLab CWE-862 3.5 Low 2023-11-06
CVE-2023-5963 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 3.1 Low 2023-11-06
CVE-2023-3399 Insertion of Sensitive Information Into Sent Data in GitLab CWE-201 8.5 High 2023-11-06
CVE-2023-3909 Inefficient Regular Expression Complexity in GitLab CWE-1333 4.3 Medium 2023-11-06
CVE-2023-3246 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 4.3 Medium 2023-11-06
CVE-2023-5825 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab CWE-835 6.5 Medium 2023-11-06
CVE-2023-5831 Insertion of Sensitive Information Into Sent Data in GitLab CWE-201 3.7 Low 2023-11-06
CVE-2023-5106 Incorrect Authorization in GitLab CWE-863 8.2 High 2023-10-02
CVE-2023-5207 Execution with Unnecessary Privileges in GitLab CWE-250 8.2 High 2023-09-30
CVE-2023-3413 Insertion of Sensitive Information Into Sent Data in GitLab CWE-201 6.5 Medium 2023-09-29
CVE-2023-3922 URL Redirection to Untrusted Site ('Open Redirect') in GitLab CWE-601 3.0 Low 2023-09-29
CVE-2023-5198 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2023-09-29
CVE-2023-0989 Improper Ownership Management in GitLab CWE-282 4.3 Medium 2023-09-29
CVE-2023-2233 Missing Authorization in GitLab CWE-862 3.1 Low 2023-09-29
CVE-2023-3115 Incorrect User Management in GitLab CWE-286 5.4 Medium 2023-09-29
CVE-2023-3920 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2023-09-29
CVE-2023-3917 Improper Validation of Specified Type of Input in GitLab CWE-1287 4.3 Medium 2023-09-29
CVE-2023-3914 Incorrect User Management in GitLab CWE-286 5.4 Medium 2023-09-29
CVE-2023-3906 Improper Validation of Specified Type of Input in GitLab CWE-1287 3.5 Low 2023-09-29
CVE-2023-3979 Incorrect Authorization in GitLab CWE-863 3.1 Low 2023-09-29
CVE-2023-4532 Incorrect Authorization in GitLab CWE-863 4.3 Medium 2023-09-29
CVE-2023-5009 Incorrect Authorization in GitLab CWE-863 9.6 High 2023-09-19
CVE-2023-4630 Missing Authorization in GitLab CWE-862 5.0 Medium 2023-09-11
CVE-2023-3210 Inefficient Regular Expression Complexity in GitLab CWE-1333 6.5 Medium 2023-09-01
CVE-2023-3950 Cleartext Storage of Sensitive Information in GitLab CWE-312 5.5 Medium 2023-09-01
CVE-2023-4018 Direct Request ('Forced Browsing') in GitLab CWE-425 4.3 Medium 2023-09-01
CVE-2023-4378 Insertion of Sensitive Information Into Sent Data in GitLab CWE-201 5.5 Medium 2023-09-01
CVE-2023-4647 Allocation of Resources Without Limits or Throttling in GitLab CWE-770 5.3 Medium 2023-09-01
CVE-2022-4343 Exposure of Sensitive Information to an Unauthorized Actor in GitLab CWE-200 5.0 Medium 2023-09-01

All 1083 known CVE vulnerabilities affecting GitLab with full Chinese analysis, references, and POCs where available.