GitLab Vulnerabilities and Affected Products
Vulnerabilities associated with Gitaly.
Products
Clear product- GitLab1,037 vulnerabilities
- GitLab CE/EE23 vulnerabilities
- GitLab Community and Enterprise Editions13 vulnerabilities
- GitLab EE10 vulnerabilities
- GitLab Runner6 vulnerabilities
- Community and Enterprise Editions2 vulnerabilities
- DAST2 vulnerabilities
- GitLab Community Edition2 vulnerabilities
- GitLab Enterprise Edition2 vulnerabilities
- gitlab-shell2 vulnerabilities
- gitlab-vscode-extension2 vulnerabilities
- DAST API scanner1 vulnerability
- Gitaly1 vulnerability
- GitLab AI Gateway1 vulnerability
- GitLab Community Edition and GitLab Enterprise Edition1 vulnerability
- GitLab DAST API scanner1 vulnerability
- GitLab Language Server1 vulnerability
- GitLab Pages1 vulnerability
- GitLab VSCode Fork1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
Gitaly Insufficient Session Expiration vulnerabilityWhen importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above. CWE-613Nov 17, 2020 | CVSS2.5v3.1 | EPSS0.274% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |