Overview 10 matches · 1 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
1
10.0%
Outside Waratek scope
0
0.0%
Not applicable
9
90.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
10
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
10
100.0%
No public exploit
0
0.0%
split by
peak 2 / quarter
Q4 201
Not applicable1
High1
not blocked1
Forecast only1
Q1 210
Q2 210
Q3 212
Not applicable2
High1
Medium1
not blocked2
Forecast only2
Q4 211
Not applicable1
High1
not blocked1
Forecast only1
Q1 220
Q2 222
No exploit published1
Not applicable1
High1
Medium1
not blocked2
Forecast only2
Q3 221
Not applicable1
High1
not blocked1
Forecast only1
Q4 220
Q1 231
Not applicable1
High1
not blocked1
Forecast only1
Q2 231
Not applicable1
Medium1
not blocked1
Forecast only1
Q3 230
Q4 230
Q1 241
Not applicable1
High1
not blocked1
Forecast only1
Q1 21Q3 21Q1 22Q3 22Q1 23Q3 23Q1 24
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2024-1451 | High | 2024-02-22 | Not applicable | Forecast only | An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.1. A crafted payload added to the user profile page could lead to a stored XSS on the client side, allowing attackers to perform arbitrary actions on behalf of victims." |
| CVE-2023-0921 | Medium | 2023-06-06 | Not applicable | Forecast only | A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage. |
| CVE-2023-0050 | High | 2023-03-09 | Not applicable | Forecast only | An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. A specially crafted Kroki diagram could lead to a stored XSS on the client side which allows attackers to perform arbitrary actions on behalf of victims. |
| CVE-2022-2230 | High | 2022-07-01 | Not applicable | Forecast only | A Stored Cross-Site Scripting vulnerability in the project settings page in GitLab CE/EE affecting all versions from 14.4 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows an attacker to execute arbitrary JavaScript code in GitLab on a victim's behalf. |
| CVE-2022-34777 | Medium | 2022-06-30 | No exploit published | Forecast only | Jenkins GitLab Plugin 1.5.34 and earlier does not escape multiple fields inserted into the description of webhook-triggered builds, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. |
| CVE-2022-1190 | High | 2022-04-04 | Not applicable | Forecast only | Improper handling of user input in GitLab CE/EE versions 8.3 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowed an attacker to exploit a stored XSS by abusing multi-word milestone references in issue descriptions, comments, etc. |
| CVE-2021-39906 | High | 2021-11-05 | Not applicable | Forecast only | Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary JavaScript code on the victim's behalf. |
| CVE-2021-22242 | High | 2021-08-25 | Not applicable | Forecast only | Insufficient input sanitization in Mermaid markdown in GitLab CE/EE version 11.4 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted markdown |
| CVE-2021-22238 | Medium | 2021-08-20 | Not applicable | Forecast only | An issue has been discovered in GitLab affecting all versions starting with 13.3. GitLab was vulnerable to a stored XSS by using the design feature in issues. |
| CVE-2020-13340 | High | 2020-10-08 | Not applicable | Forecast only | An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI Job Log |