GitLab 厂商相关 1140 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
GitLab 提供基于 Web 的 DevOps 平台，核心用于代码托管、CI/CD 及项目管理。其历史漏洞多涉及远程代码执行、越权访问及跨站脚本攻击，累计收录 CVE 达 1012 条。平台内置安全扫描功能，支持 SAST 与 DAST 集成，助力开发者在流水线中识别风险。尽管存在安全挑战，其持续更新的补丁机制与透明披露政策，使其成为企业构建安全软件供应链的重要基础设施。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2020-13266 | GitLab 安全漏洞 — GitLab | 4.3 | Medium | 2020-06-09 |
| CVE-2013-4582 | GitLab 安全漏洞 — GitLab | 6.5 | - | 2020-01-28 |
| CVE-2013-4583 | GitLab 安全漏洞 — GitLab | 8.8 | - | 2020-01-28 |
| CVE-2019-5472 | GitLab 安全漏洞 — GitLab CWE-400 | 7.5 | - | 2020-01-28 |
| CVE-2019-5470 | GitLab 信息泄露漏洞 — GitLab CWE-200 | 7.5 | - | 2020-01-28 |
| CVE-2019-15578 | GitLab 信息泄露漏洞 — GitLab CE/EE CWE-200 | 5.3 | - | 2020-01-28 |
| CVE-2019-15579 | GitLab 信息泄露漏洞 — GitLab CE/EE CWE-200 | 5.3 | - | 2020-01-28 |
| CVE-2019-15581 | GitLab 安全漏洞 — GitLab EE CWE-639 | 5.3 | - | 2020-01-28 |
| CVE-2019-15582 | GitLab 信息泄露漏洞 — GitLab EE CWE-639 | 5.3 | - | 2020-01-28 |
| CVE-2019-15590 | GitLab 安全漏洞 — GitLab EE CWE-284 | 7.5 | - | 2020-01-28 |
| CVE-2019-5474 | GitLab 访问控制错误漏洞 — GitLab EE CWE-284 | 6.5 | - | 2020-01-28 |
| CVE-2019-5465 | GitLab 信息泄露漏洞 — GitLab CE/EE CWE-200 | 4.3 | - | 2020-01-28 |
| CVE-2019-15583 | GitLab 信息泄露漏洞 — GitLab CE/EE CWE-200 | 7.5 | - | 2020-01-28 |
| CVE-2019-5464 | GitLab 代码问题漏洞 — GitLab CE/EE CWE-20 | 9.1 | - | 2020-01-28 |
| CVE-2019-15585 | GitLab 授权问题漏洞 — Gitlab CE/EE CWE-287 | 9.8 | - | 2020-01-28 |
| CVE-2019-5462 | GitLab 代码问题漏洞 — GitLab Community Edition and GitLab Enterprise Edition | 9.8 | - | 2020-01-28 |
| CVE-2019-15586 | GitLab Mermaid插件跨站脚本漏洞 — Gitlab CE/EE CWE-79 | 6.1 | - | 2020-01-28 |
| CVE-2017-0920 | GitLab Community Edition和Enterprise Edition Projects::MergeRequests::CreationsController安全漏洞 — GitLab Community and Enterprise Editions CWE-639 | 4.3 | - | 2018-03-22 |
| CVE-2017-0914 | GitLab Community Edition和Enterprise Edition MilestoneFinder组件SQL注入漏洞 — GitLab Community and Enterprise Editions CWE-89 | 7.5 | - | 2018-03-21 |
| CVE-2017-0915 | GitLab Community Edition 安全漏洞 — GitLab Community and Enterprise Editions CWE-77 | 8.8 | - | 2018-03-21 |
| CVE-2017-0916 | GitLab Community Edition 安全漏洞 — GitLab Community and Enterprise Editions CWE-77 | 9.8 | - | 2018-03-21 |
| CVE-2017-0917 | GitLab Community Edition CI job组件跨站脚本漏洞 — GitLab Community and Enterprise Editions CWE-79 | 6.1 | - | 2018-03-21 |
| CVE-2017-0918 | GitLab Community Edition GitLab CI runner组件路径遍历漏洞 — GitLab Community and Enterprise Editions CWE-23 | 8.8 | - | 2018-03-21 |
| CVE-2017-0922 | Gitlab Enterprise Edition GitLab Projects::BoardsController组件安全漏洞 — GitLab Community and Enterprise Editions CWE-639 | 7.5 | - | 2018-03-21 |
| CVE-2017-0923 | GitLab Community Edition IPython notebooks组件跨站脚本漏洞 — GitLab Community and Enterprise Editions CWE-79 | 6.1 | - | 2018-03-21 |
| CVE-2017-0924 | GitLab Community Edition labels组件跨站脚本漏洞 — GitLab Community and Enterprise Editions CWE-79 | 6.1 | - | 2018-03-21 |
| CVE-2017-0925 | Gitlab Enterprise Edition 安全漏洞 — GitLab Community and Enterprise Editions CWE-522 | 9.8 | - | 2018-03-21 |
| CVE-2017-0926 | GitLab Community Edition Oauth sign-in组件安全漏洞 — GitLab Community and Enterprise Editions CWE-285 | 8.8 | - | 2018-03-21 |
| CVE-2017-0927 | GitLab Community Edition deployment keys组件安全漏洞 — GitLab Community and Enterprise Editions CWE-285 | 6.5 | - | 2018-03-21 |
| CVE-2018-3710 | GitLab Community Edition和Enterprise Edition project import组件安全漏洞 — GitLab Community and Enterprise Editions CWE-377 | 7.8 | - | 2018-03-21 |
本页汇总了 GitLab 厂商截至目前公开的全部 1140 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。