Known vulnerabilities in GitLab Enterprise Edition 11.3.14 - page 3
Vendor:
GitLab, Inc
Software:
GitLab Enterprise Edition
Version:
11.3.14
Software CPE:
cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Website:
https://about.gitlab.com/
Total vulnerabilities:
309
Public exploits:
4
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
19.3.2
19.2.6
19.1.8
19.3.1
19.2.5
19.1.7
19.3.0
19.2.4
19.2.3
19.1.6
19.1.5
19.0.8
19.0.7
18.11.11
18.11.10
19.2.2
19.1.4
19.0.6
18.11.9
18.11.8
19.2.1
19.1.3
19.0.5
19.2.0
19.1.2
19.0.4
18.11.7
18.8.11
19.1.1
19.0.3
18.11.6
19.1.0
19.0.2
18.11.5
18.10.8
19.0.1
18.11.4
18.10.7
18.6.8
18.5.7
18.7.7
18.6.7
18.5.6
18.9.8
18.8.10
19.0.0
18.11.3
18.10.6
18.9.7
18.11.2
18.10.5
18.11.1
18.10.4
18.9.6
18.11.0
18.10.3
18.9.5
18.8.9
18.10.2
18.9.4
18.8.8
18.10.1
18.9.3
18.8.7
18.10.0
18.7.6
18.8.6
18.9.2
18.9.1
18.9.0
18.8.5
18.7.5
18.8.4
18.7.4
18.6.6
18.8.3
18.7.3
18.6.5
18.8.2
18.7.2
18.6.4
18.8.1
18.8.0
18.5.5
18.6.3
18.7.1
18.7.0
18.6.2
18.5.4
18.4.6
18.6.1
18.5.3
18.4.5
18.6.0
18.5.2
18.4.4
18.3.6
18.5.1
18.4.3
18.3.5
18.5.0
18.4.2
18.3.4
18.2.8
18.4.1
18.3.3
18.2.7
18.4.0
18.3.2
18.2.6
18.1.6
18.3.1
18.2.5
18.1.5
18.3.0
18.2.4
18.2.3
17.11.7
18.2.2
18.1.4
18.0.6
18.2.1
18.1.3
18.0.5
18.2.0
18.1.2
18.0.4
17.11.6
17.11.5
18.0.3
18.1.1
18.1.0
18.0.2
17.11.4
17.10.8
18.0.1
17.11.3
17.10.7
18.0.0
17.11.2
17.10.6
17.9.8
17.9.7
17.10.5
17.11.1
17.11.0
17.10.4
17.9.6
17.8.7
17.10.3
17.10.2
17.9.5
17.9.4
17.10.1
17.9.3
17.8.6
17.10.0
17.9.2
17.8.5
17.7.7
17.9.1
17.8.4
17.7.6
17.8.3
17.7.5
17.9.0
17.8.2
17.7.4
17.6.5
17.8.1
17.7.3
17.6.4
17.8.0
17.7.2
17.7.1
17.6.3
17.5.5
17.7.0
17.6.2
17.5.4
17.4.6
17.6.1
17.5.3
17.4.5
17.6.0
17.5.2
17.4.4
17.3.7
17.5.1
17.4.3
17.3.6
17.5.0
17.4.2
17.3.5
17.2.9
17.4.1
17.3.4
17.2.8
16.2.11
16.1.8
16.0.10
16.4.7
16.3.9
16.5.10
16.6.10
16.8.10
16.7.10
16.9.11
16.10.10
17.4.0
17.2.7
17.1.8
17.0.8
16.11.10
17.3.3
17.2.6
17.3.2
17.2.5
17.1.7
17.0.7
16.11.9
17.3.1
17.2.4
17.2.3
17.1.6
17.1.5
17.3.0
17.2.2
17.1.4
17.0.6
16.11.8
17.2.1
17.1.3
17.0.5
16.1.7
16.0.9
16.4.6
16.3.8
16.2.10
16.5.9
16.11.7
16.10.9
16.9.10
16.8.9
16.7.9
16.6.9
17.2.0
17.1.2
17.0.4
16.11.6
17.1.1
17.0.3
16.11.5
16.6.8
16.10.8
16.9.9
16.8.8
16.7.8
17.1.0
17.0.2
16.11.4
16.10.7
16.10.6
16.11.3
17.0.1
17.0.0
16.9.8
16.11.2
16.10.5
16.9.7
16.11.1
16.10.4
16.9.6
16.11.0
16.10.3
16.9.5
16.8.7
16.10.2
16.9.4
16.8.6
16.10.1
16.9.3
16.8.5
16.10.0
16.9.2
16.8.4
16.7.7
16.9.1
16.8.3
16.7.6
16.9.0
16.8.2
16.7.5
16.6.7
16.8.1
16.7.4
16.6.6
16.5.8
16.8.0
16.7.3
16.6.5
16.5.7
16.5.5
16.7.1
16.6.3
16.7.2
16.6.4
16.5.6
16.4.5
16.3.7
16.2.9
16.1.6
16.7.0
16.6.2
16.5.4
16.4.4
16.6.1
16.5.3
16.4.3
16.6.0
16.5.2
16.5.1
16.4.2
16.3.6
16.5.0
16.4.1
16.3.5
16.2.8
16.4.0
16.3.4
16.2.7
16.3.3
16.2.6
16.3.2
16.3.1
16.2.5
16.1.5
16.3.0
16.2.4
16.1.4
16.2.3
16.2.2
16.1.3
16.0.8
15.11.13
16.2.1
16.2.0
15.11.12
16.1.2
16.0.7
15.11.11
16.1.1
16.0.6
15.11.10
16.1.0
16.0.5
15.11.9
16.0.4
16.0.3
15.11.8
16.0.2
15.11.7
15.10.8
15.11.6
16.0.1
15.11.5
16.0.0
15.11.4
15.11.3
15.10.7
15.9.8
15.11.2
15.10.6
15.9.7
15.11.1
15.10.5
15.9.6
15.11.0
15.10.4
15.10.3
15.10.2
15.9.5
15.8.6
15.7.9
15.8.5
15.9.4
15.10.1
15.10.0
15.9.3
15.9.2
15.8.4
15.7.8
15.9.1
15.9.0
15.8.3
15.8.2
15.7.7
15.6.8
15.8.1
15.7.6
15.6.7
15.8.0
15.7.5
15.7.4
15.6.6
15.6.5
15.5.9
15.5.8
15.7.3
15.7.2
15.6.4
15.5.7
15.7.1
15.6.3
15.7.0
15.5.6
15.6.2
15.6.1
15.5.5
15.4.6
15.6.0
15.4.5
15.5.4
15.5.3
15.5.2
15.4.4
15.3.5
15.5.1
15.5.0
15.4.3
15.4.2
15.4.1
15.4.0
15.2.5
15.3.4
15.3.3
15.3.2
15.2.4
15.1.6
15.3.1
15.2.3
15.1.5
15.3.0
15.2.2
15.2.1
15.1.4
15.0.5
15.2.0
15.1.3
15.1.2
15.1.1
15.0.4
14.10.5
15.1.0
15.0.3
15.0.2
15.0.1
14.10.4
14.9.5
15.0.0
14.10.3
14.10.2
14.10.1
14.9.4
14.8.6
14.10.0
14.9.3
14.9.2
14.8.5
14.7.7
14.6.7
14.7.6
14.9.1
14.9.0
14.8.4
14.8.3
14.7.5
14.6.6
14.6.5
14.7.4
14.8.2
14.8.1
14.8.0
14.7.3
14.7.2
14.7.1
14.6.4
14.5.4
14.7.0
14.6.3
14.6.2
14.5.3
14.4.5
14.6.1
14.6.0
14.5.2
14.4.4
14.3.6
14.4.3
14.5.1
14.3.5
14.2.7
14.5.0
14.1.8
14.4.2
14.0.12
13.12.15
13.12.14
13.12.13
14.4.1
14.3.4
14.2.6
14.4.0
14.3.3
14.3.2
14.3.1
14.2.5
14.1.7
14.1.6
14.0.11
13.12.12
14.3.0
14.2.4
14.1.5
14.0.10
13.12.11
14.2.3
14.2.2
14.1.4
14.0.9
14.0.8
14.2.1
14.2.0
14.1.3
13.12.10
14.1.2
14.0.7
13.12.9
14.1.1
14.1.0
14.0.6
14.0.5
14.0.4
13.12.8
13.11.7
14.0.3
14.0.2
14.0.1
14.0.0
13.12.7
13.12.6
13.12.5
13.12.4
13.12.3
13.12.1
13.11.6
13.10.5
13.11.5
13.12.2
13.12.0
13.11.4
13.11.3
13.11.2
13.10.4
13.9.7
13.11.1
13.11.0
13.10.3
13.9.6
13.8.8
13.10.2
13.10.1
13.9.5
13.8.7
13.10.0
13.9.4
13.8.6
13.7.9
13.9.3
13.9.2
13.8.5
13.7.8
13.9.1
13.9.0
13.8.4
13.7.7
13.6.7
13.8.3
13.8.2
13.7.6
13.6.6
13.8.1
13.7.5
13.8.0
13.7.4
13.6.5
13.5.7
13.7.3
13.7.2
13.6.4
13.5.6
13.7.1
13.7.0
13.6.3
13.6.2
13.6.1
13.6.0
13.5.5
13.5.4
13.5.3
13.4.7
13.4.6
13.3.9
13.4.5
13.5.2
13.5.1
13.3.8
13.5.0
13.4.4
13.4.3
13.4.2
13.3.7
13.3.6
13.3.5
13.2.10
13.4.0
13.3.4
13.2.8
13.1.10
13.3.3
13.2.7
13.1.9
13.3.2
13.3.1
13.3.0
13.2.6
13.2.5
13.1.8
13.1.7
13.0.14
13.0.13
13.2.4
13.2.3
13.1.6
13.0.12
13.0.11
13.2.2
13.1.5
13.2.0
13.1.0
13.0.10
13.1.3
13.0.9
12.10.14
13.1.2
13.0.8
12.10.13
13.0.7
12.10.12
13.1.1
13.0.6
12.10.11
12.9.10
13.0.4
13.0.3
12.10.8
13.0.1
12.10.7
12.9.8
13.0.0
12.10.6
12.10.5
12.10.4
12.9.6
12.10.2
12.10.1
12.9.5
12.8.10
12.10.0
12.9.4
12.9.3
12.9.2
12.9.1
12.9.0
12.8.9
12.8.7
12.8.6
12.8.5
12.8.4
12.8.3
12.8.2
12.8.1
12.8.0
12.7.9
12.6.7
12.7.2
12.5.9
12.7.4
12.7.5
12.7.3
12.7.1
12.7.0
12.6.6
12.6.5
12.6.4
12.6.2
12.6.1
12.6.0
12.5.8
12.5.5
12.5.4
12.5.3
12.5.1
12.5.0
12.4.8
12.3.9
12.2.11
12.1.14
12.1.12
12.0.12
12.0.10
12.4.5
12.4.3
12.4.2
12.4.1
12.4.0
12.3.7
12.3.4
12.3.2
12.3.1
12.3.0
12.2.8
12.2.7
12.2.6
12.1.10
12.1.9
12.0.9
12.2.5
12.2.4
12.2.2
12.1.5
12.1.4
12.1.3
12.1.2
12.1.1
12.0.7
12.0.6
11.11.8
11.11.7
8.12.7
8.12.6
8.12.5
8.12.4
8.12.3
8.12.2
8.12.1
8.11.9
8.11.8
8.11.7
8.11.6
8.11.5
8.11.4
8.11.3
8.11.2
8.11.1
8.10.12
8.10.11
8.10.10
8.10.9
8.10.8
8.10.7
8.10.6
8.10.5
8.10.4
8.10.3
8.10.2
8.10.1
8.9.10
8.9.9
8.9.8
8.9.7
8.9.6
8.9.5
8.9.4
8.9.3
8.9.2
8.9.1
8.8.9
8.8.8
8.8.7
8.8.6
8.8.5
8.8.4
8.8.3
8.8.2
8.8.1
8.7.9
8.7.8
8.7.7
8.7.6
8.7.5
8.7.4
8.7.3
8.7.2
8.7.1
8.6.9
8.6.8
8.6.7
8.6.6
8.6.5
8.6.4
8.6.3
8.6.2
8.6.1
8.5.13
8.5.12
8.5.11
8.5.10
8.5.9
8.5.8
8.5.7
8.5.6
8.5.5
8.5.4
8.5.3
8.5.2
8.5.1
8.4.11
8.4.10
8.4.9
8.4.8
8.4.7
8.4.6
8.4.5
8.4.4
8.4.3
8.4.2
8.4.1
8.3.10
8.3.9
8.3.8
8.3.7
8.3.6
8.3.5
8.3.4
8.3.3
8.3.2
8.3.1
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.1.4
8.1.3
8.1.2
8.1.1
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
7.14.3
7.14.2
7.14.1
7.13.3
7.13.2
7.13.1
7.12.2
7.12.1
7.11.4
7.11.3
7.11.2
7.10.1
7.6.2
7.6.1
7.5.3
7.4.4
6.9.4
6.9.3
6.9.2
6.9.1
6.7.1
12.2.1
12.2.0
12.2.3
11.7.3
11.5.10
11.10.8
11.11.4
11.10.7
12.0.2
12.0.1
6.6.2
6.6.1
12.0.0
11.11.3
11.11.2
11.10.6
11.9.12
11.11.0
11.8.7
11.8.6
11.10.4
11.10.3
11.10.2
11.10.1
11.10.0
11.9.10
11.9.9
11.9.8
11.9.7
11.9.6
11.9.5
11.9.3
11.9.2
11.9.1
11.9.0
11.8.10
11.8.3
11.8.2
11.8.0
11.7.12
11.7.11
11.7.10
11.7.8
11.7.7
11.7.5
11.7.2
11.7.1
11.7.0
11.6.11
11.6.10
11.6.9
11.6.8
11.6.5
11.6.4
11.6.3
11.6.2
11.6.1
11.6.0
11.5.11
11.5.8
11.5.5
11.5.3
11.5.2
11.5.1
11.5.0
11.4.9
11.4.8
11.4.7
11.4.6
11.4.5
11.4.4
11.4.3
11.4.2
11.4.1
11.4.0
11.3.14
11.3.13
11.3.11
11.3.10
11.3.9
11.3.8
11.3.7
11.3.6
11.3.5
11.3.4
11.3.3
11.3.2
11.3.1
11.3.0
11.2.8
11.2.7
11.2.6
11.2.5
11.2.4
11.2.3
11.2.2
11.2.1
11.2.0
11.1.7
11.1.6
11.1.5
11.1.4
11.1.3
11.1.2
11.1.1
11.1.0
11.0.6
11.0.5
11.0.4
11.0.3
11.0.2
11.0.1
11.0.0
10.8.6
10.8.5
10.8.4
10.8.3
10.8.2
10.8.1
10.8.0
10.7.7
10.7.6
10.7.5
10.7.4
10.7.3
10.7.2
10.7.1
10.7.0
10.6.6
10.6.5
10.6.4
10.6.3
10.6.2
10.6.1
10.6.0
10.5.8
10.5.7
10.5.6
10.5.5
10.5.4
10.5.3
10.5.2
10.5.1
10.5.0
10.4.7
10.4.6
10.4.5
10.4.4
10.4.3
10.4.2
10.4.1
10.4.0
10.3.9
10.3.8
10.3.7
10.3.6
10.3.5
10.3.4
10.3.3
10.3.2
10.3.1
10.3.0
10.2.8
10.2.7
10.2.6
10.2.5
10.2.4
10.2.3
10.2.2
10.2.1
10.2.0
10.1.7
10.1.6
10.1.5
10.1.4
10.1.3
10.1.2
10.1.1
10.1.0
10.0.7
10.0.5
10.0.4
10.0.3
10.0.2
10.0.1
10.0.0
9.5.10
9.5.9
9.5.8
9.5.7
9.5.6
9.5.5
9.5.4
9.5.3
9.5.2
9.5.1
9.5.0
9.4.7
9.4.6
9.4.5
9.4.4
9.4.3
9.4.2
9.4.1
9.4.0
9.3.11
9.3.10
9.3.9
9.3.8
9.3.7
9.3.6
9.3.5
9.3.4
9.3.3
9.3.2
9.3.1
9.3.0
9.2.10
9.2.9
9.2.8
9.2.7
9.2.6
9.2.5
9.2.4
9.2.3
9.2.2
9.2.1
9.2.0
9.1.10
9.1.9
9.1.8
9.1.7
9.1.6
9.1.5
9.1.4
9.1.3
9.1.2
9.1.1
9.1.0
9.0.13
9.0.12
9.0.11
9.0.10
9.0.9
9.0.8
9.0.7
9.0.6
9.0.5
9.0.4
9.0.3
9.0.2
9.0.1
9.0.0
8.17.8
8.17.7
8.17.6
8.17.5
8.17.4
8.17.3
8.17.2
8.17.1
8.17.0
8.16.9
8.16.8
8.16.7
8.16.6
8.16.5
8.16.4
8.16.3
8.16.2
8.16.1
8.16.0
8.15.8
8.15.7
8.15.6
8.15.5
8.15.4
8.15.3
8.15.2
8.15.1
8.15.0
8.14.10
8.14.9
8.14.8
8.14.7
8.14.6
8.14.5
8.14.4
8.14.3
8.14.2
8.14.1
8.14.0
8.13.12
8.13.11
8.13.10
8.13.9
8.13.8
8.13.7
8.13.6
8.13.5
8.13.4
8.13.3
8.13.2
8.13.1
8.13.0
8.12.12
8.12.11
8.12.10
8.12.9
8.12.8
8.12.0
8.11.11
8.11.10
8.11.0
8.10.0
8.9.0
8.8.0
8.7.0
8.6.0
8.5.0
8.4.0
8.3.0
8.2.0
8.1.0
8.0.0
7.14.0
7.13.0
7.12.0
7.11.0
7.10.0
7.9.0
7.8.0
7.7.0
7.6.0
7.5.0
7.4.0
7.3.0
7.2.0
7.1.0
7.0.0
6.9.0
6.8.0
6.7.0
6.6.0
6.5.0
6.4.0
6.3.0
6.2.0
Vulnerabilities (309)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU105689 - Improper Control of Generation of Code ('Code Injection') CVE-2025-27407 |
CWE-94 | High | 17.7.7, 17.8.5, 17.9.2 | 13.03.2025 |
SB2025031315 SB2025031316 SB2025040330 and 3 more |
||
| #VU105688 - Improper Verification of Cryptographic Signature CVE-2025-25292 |
CWE-347 | High | 17.7.7, 17.8.5, 17.9.2 | 13.03.2025 |
SB2025031314 SB2025031316 SB20250402144 and 1 more |
||
| #VU105687 - Improper Verification of Cryptographic Signature CVE-2025-25291 |
CWE-347 | High | 17.7.7, 17.8.5, 17.9.2 | 13.03.2025 |
SB2025031314 SB2025031316 SB20250402144 |
||
| #VU105680 - Improper input validation CVE-2024-13054 |
CWE-20 | Low | 17.7.7, 17.8.5, 17.9.2 | 13.03.2025 |
SB2025031316 |
||
| #VU103999 - Exposure of Sensitive System Information to an Unauthorized Control Sphere CVE-2025-1212 |
CWE-497 | Medium | 17.6.5, 17.7.4, 17.8.2 | 17.02.2025 |
SB2025021709 |
||
| #VU101737 - Exposure of sensitive information to an unauthorized actor CVE-2024-12292 |
CWE-200 | Low | 17.4.6, 17.5.4, 17.6.2 | 12.12.2024 |
SB2024121228 |
||
| #VU101730 - Improper input validation CVE-2024-8233 |
CWE-20 | Medium | 17.4.6, 17.5.4, 17.6.2 | 12.12.2024 |
SB2024121228 |
||
| #VU100974 - Inefficient Algorithmic Complexity CVE-2024-8237 |
CWE-407 | Medium | 17.4.5, 17.5.3, 17.6.1 | 27.11.2024 |
SB2024112714 |
||
| #VU100973 - Missing Authorization CVE-2024-8114 |
CWE-862 | Medium | 17.4.5, 17.5.3, 17.6.1 | 27.11.2024 |
SB2024112714 |
||
| #VU100470 - Improper input validation |
CWE-20 | Medium | 17.3.7, 17.4.4, 17.5.2 | 14.11.2024 |
SB2024111420 |
||
| #VU99333 - Allocation of Resources Without Limits or Throttling CVE-2024-6826 |
CWE-770 | Medium | 17.3.6, 17.4.3, 17.5.1 | 25.10.2024 |
SB2024102505 |
||
| #VU98339 - Security Features CVE-2024-9623 |
CWE-254 | Low | 17.2.9, 17.3.5, 17.4.2 | 10.10.2024 |
SB2024101017 |
||
| #VU97207 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2024-4283 |
CWE-601 | Medium | 17.1.7, 17.2.5, 17.3.2 | 12.09.2024 |
SB2024091269 |
||
| #VU97206 - Exposure of sensitive information to an unauthorized actor CVE-2024-4660 |
CWE-200 | Medium | 17.1.7, 17.2.5, 17.3.2 | 12.09.2024 |
SB2024091269 |
||
| #VU97166 - Improper Access Control CVE-2024-6678 |
CWE-284 | Medium | 17.1.7, 17.2.5, 17.3.2 | 12.09.2024 |
SB2024091269 |
||
| #VU96449 - Improper input validation |
CWE-20 | Medium | 17.1.6, 17.2.4, 17.3.1 | 22.08.2024 |
SB2024082254 |
||
| #VU96445 - Improper Access Control CVE-2024-6502 |
CWE-284 | Medium | 17.1.6, 17.2.4, 17.3.1 | 22.08.2024 |
SB2024082254 |
||
| #VU95533 - Security Features CVE-2024-6329 |
CWE-254 | Medium | 17.0.6, 17.1.4, 17.2.2 | 08.08.2024 |
SB2024080830 |
||
| #VU95531 - Incorrect Regular Expression CVE-2024-2800 |
CWE-185 | Medium | 17.0.6, 17.1.4, 17.2.2 | 08.08.2024 |
SB2024080830 |
||
| #VU95523 - Resource exhaustion CVE-2024-5423 |
CWE-400 | Medium | 17.0.6, 17.1.4, 17.2.2 | 08.08.2024 |
SB2024080830 |
Showing elements 41 - 60 out of 309