Skip to main content

GitLab Multiple Vulnerabilities

Release Date: 7 Feb 2022 5124 Views

RISK: Medium Risk

TYPE: Servers - Other Servers

TYPE: Other Servers

Multiple vulnerabilities were identified in GitLab. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, sensitive information disclosure, security restriction bypass, spoofing and cross-site scripting on the targeted system.


Impact

  • Denial of Service
  • Information Disclosure
  • Security Restriction Bypass
  • Spoofing
  • Cross-Site Scripting

System / Technologies affected

  • GitLab Community Edition (CE) versions prior to 14.7.1, 14.6.4, and 14.5.4
  • GitLab Enterprise Edition (EE) versions prior to 14.7.1, 14.6.4, and 14.5.4

  • GitLab Omnibus prior to 14.7


Solutions

Before installation of the software, please visit the software vendor web-site for more details.


Vulnerability Identifier


Source


Related Link