GCVE - cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:community:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:community:*:*:*

part: a version: 15.10.0 update: *

Vendor	Gitlab (`57573e99-56e6-5fad-895e-0ce7fffc5b90`)
Product	Gitlab (`5414fcda-a172-5f72-b6e4-b415a19d21eb`)
Edition	*
Language	*
Software edition	community
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:gitlab/gitlab-org/gitlab`	purl2cpe	2026-06-01 10:14:46.293546

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-1787`	vulnerable	2026-06-08 05:52:37.035812	Details available MEDIUM (4.3) An issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. A search timeout could be triggered if a specific HTML payload was used in the issue description. Published: 2023-04-05T00:00:00.000Z Updated: 2025-02-10T20:42:19.982Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/394817 https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1787.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1733`	vulnerable	2026-06-08 05:52:36.873807	Details available MEDIUM (5.8) A denial of service condition exists in the Prometheus server bundled with GitLab affecting all versions from 11.10 to 15.8.5, 15.9 to 15.9.4 and 15.10 to 15.10.1. Published: 2023-04-05T00:00:00.000Z Updated: 2025-02-10T20:48:40.695Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/392665 https://hackerone.com/reports/1723124 https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1733.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1710`	vulnerable	2026-06-08 05:52:36.820980	Details available MEDIUM (5.3) A sensitive information disclosure vulnerability in GitLab affecting all versions from 15.0 prior to 15.8.5, 15.9 prior to 15.9.4 and 15.10 prior to 15.10.1 allows an attacker to view the count of internal notes for a given issue. Published: 2023-04-05T00:00:00.000Z Updated: 2025-02-10T20:49:48.239Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/388242 https://hackerone.com/reports/1829768 https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1710.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1708`	vulnerable	2026-06-08 05:52:36.813025	Details available MEDIUM (5.7) An issue was identified in GitLab CE/EE affecting all versions from 1.0 prior to 15.8.5, 15.9 prior to 15.9.4, and 15.10 prior to 15.10.1 where non-printable characters gets copied from clipboard, allowing unexpected commands to be executed on victim machine. Published: 2023-04-05T00:00:00.000Z Updated: 2025-02-10T20:51:52.816Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/387185 https://hackerone.com/reports/1805604 https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1708.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1417`	vulnerable	2026-06-08 05:52:35.800081	Details available MEDIUM (4.3) An issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It was possible for an unauthorised user to add child epics linked to victim's epic in an unrelated group. Published: 2023-04-05T00:00:00.000Z Updated: 2025-02-11T15:26:30.751Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/396720 https://hackerone.com/reports/1892200 https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1417.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1098`	vulnerable	2026-06-08 05:52:33.832079	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1071`	vulnerable	2026-06-08 05:52:33.741108	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-0838`	vulnerable	2026-06-08 05:52:32.925792	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-0523`	vulnerable	2026-06-08 05:52:31.844613	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-0450`	vulnerable	2026-06-08 05:52:04.970647	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-0319`	vulnerable	2026-06-08 05:52:04.731843	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-4143`	vulnerable	2026-06-08 05:51:36.886787	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3513`	vulnerable	2026-06-08 05:48:21.315871	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3375`	vulnerable	2026-06-08 05:48:20.776693	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.