GCVE - cpe:2.3:a:gitlab:gitlab:14.10.0:*:*:*:community:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gitlab:gitlab:14.10.0:*:*:*:community:*:*:*

part: a version: 14.10.0 update: *

Vendor	Gitlab (`57573e99-56e6-5fad-895e-0ce7fffc5b90`)
Product	Gitlab (`5414fcda-a172-5f72-b6e4-b415a19d21eb`)
Edition	*
Language	*
Software edition	community
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:gitlab/gitlab-org/gitlab`	purl2cpe	2026-06-01 10:14:46.234723

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-1545`	vulnerable	2026-06-08 05:39:13.397663	Details available MEDIUM (4.3) It was possible to disclose details of confidential notes created via the API in Gitlab CE/EE affecting all versions from 13.2 prior to 14.8.6, 14.9 prior to 14.9.4, and 14.10 prior to 14.10.1 if an unauthorised project member was tagged in the note. Published: 2022-05-11T14:25:17.000Z Updated: 2024-08-03T00:10:02.897Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/351030 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1545.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1510`	vulnerable	2026-06-08 05:39:13.327580	Details available MEDIUM (6.5) An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly handling malicious text in the CI Editor and CI Pipeline details page allowing the attacker to cause uncontrolled resource consumption. Published: 2022-05-11T14:48:22.000Z Updated: 2024-08-03T00:03:06.350Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/343276 https://hackerone.com/reports/1353058 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1510.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1460`	vulnerable	2026-06-08 05:39:13.186763	Details available MEDIUM (6.1) An issue has been discovered in GitLab affecting all versions starting from 9.2 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not performing correct authorizations on scheduled pipelines allowing a malicious user to run a pipeline in the context of another user. Published: 2022-05-11T14:45:11.000Z Updated: 2024-08-03T00:03:06.291Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/118782 https://hackerone.com/reports/755078 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1460.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1433`	vulnerable	2026-06-08 05:39:13.154208	Details available LOW (2.6) An issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. Missing invalidation of Markdown caching causes potential payloads from a previously exploitable XSS vulnerability (CVE-2022-1175) to persist and execute. Published: 2022-05-11T14:27:44.000Z Updated: 2024-08-03T00:03:06.378Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/357930 https://hackerone.com/reports/1528829 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1433.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1431`	vulnerable	2026-06-08 05:39:13.152916	Details available MEDIUM (4.3) An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly handling malicious requests to the PyPi API endpoint allowing the attacker to cause uncontrolled resource consumption. Published: 2022-05-10T20:27:54.000Z Updated: 2024-08-03T00:03:06.272Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/262724 https://hackerone.com/reports/996850 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1431.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1428`	vulnerable	2026-06-08 05:39:13.146600	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1426`	vulnerable	2026-06-08 05:39:13.145262	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1423`	vulnerable	2026-06-08 05:39:13.144132	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1417`	vulnerable	2026-06-08 05:39:13.136719	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1416`	vulnerable	2026-06-08 05:39:13.136053	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1413`	vulnerable	2026-06-08 05:39:13.127532	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1406`	vulnerable	2026-06-08 05:39:13.120329	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1352`	vulnerable	2026-06-08 05:39:12.785111	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1124`	vulnerable	2026-06-08 05:39:12.257953	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.