GCVE - cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:enterprise:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:enterprise:*:*:*

part: a version: 15.10.0 update: *

Vendor	Gitlab (`57573e99-56e6-5fad-895e-0ce7fffc5b90`)
Product	Gitlab (`5414fcda-a172-5f72-b6e4-b415a19d21eb`)
Edition	*
Language	*
Software edition	enterprise
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:gitlab/gitlab-org/gitlab`	purl2cpe	2026-06-01 10:14:46.293547

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-1787`	vulnerable	2026-06-08 05:52:37.035832	Details available MEDIUM (4.3) An issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. A search timeout could be triggered if a specific HTML payload was used in the issue description. Published: 2023-04-05T00:00:00.000Z Updated: 2025-02-10T20:42:19.982Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/394817 https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1787.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1733`	vulnerable	2026-06-08 05:52:36.873828	Details available MEDIUM (5.8) A denial of service condition exists in the Prometheus server bundled with GitLab affecting all versions from 11.10 to 15.8.5, 15.9 to 15.9.4 and 15.10 to 15.10.1. Published: 2023-04-05T00:00:00.000Z Updated: 2025-02-10T20:48:40.695Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/392665 https://hackerone.com/reports/1723124 https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1733.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1710`	vulnerable	2026-06-08 05:52:36.820998	Details available MEDIUM (5.3) A sensitive information disclosure vulnerability in GitLab affecting all versions from 15.0 prior to 15.8.5, 15.9 prior to 15.9.4 and 15.10 prior to 15.10.1 allows an attacker to view the count of internal notes for a given issue. Published: 2023-04-05T00:00:00.000Z Updated: 2025-02-10T20:49:48.239Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/388242 https://hackerone.com/reports/1829768 https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1710.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1708`	vulnerable	2026-06-08 05:52:36.813044	Details available MEDIUM (5.7) An issue was identified in GitLab CE/EE affecting all versions from 1.0 prior to 15.8.5, 15.9 prior to 15.9.4, and 15.10 prior to 15.10.1 where non-printable characters gets copied from clipboard, allowing unexpected commands to be executed on victim machine. Published: 2023-04-05T00:00:00.000Z Updated: 2025-02-10T20:51:52.816Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/387185 https://hackerone.com/reports/1805604 https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1708.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1417`	vulnerable	2026-06-08 05:52:35.800178	Details available MEDIUM (4.3) An issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It was possible for an unauthorised user to add child epics linked to victim's epic in an unrelated group. Published: 2023-04-05T00:00:00.000Z Updated: 2025-02-11T15:26:30.751Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/396720 https://hackerone.com/reports/1892200 https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1417.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1167`	vulnerable	2026-06-08 05:52:34.016069	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1098`	vulnerable	2026-06-08 05:52:33.832099	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1071`	vulnerable	2026-06-08 05:52:33.741210	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-0838`	vulnerable	2026-06-08 05:52:32.925894	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-0523`	vulnerable	2026-06-08 05:52:31.845392	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-0450`	vulnerable	2026-06-08 05:52:04.970781	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-0319`	vulnerable	2026-06-08 05:52:04.732414	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-4143`	vulnerable	2026-06-08 05:51:36.887669	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3513`	vulnerable	2026-06-08 05:48:21.315983	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3375`	vulnerable	2026-06-08 05:48:20.777397	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.