GitLab GitLab Runner
6 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-2251 | <15.3.5 ; >=15.4, <15.4.4 ; >=15.5, <15.5.2 | Improper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5. | HIGH 8.0 | 1.2 % | ||
| CVE-2021-39947 | <14.3.4 ; >=14.4, <14.4.2 ; >=14.5, <14.5.2 | In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2 would re-use the fi | HIGH 7.5 | 0.9 % | ||
| CVE-2021-39939 | >=13.7, <14.3.6 ; >=14.4, <14.4.4 ; >=14.5, <14.5.2 | An uncontrolled resource consumption vulnerability in GitLab Runner affecting all versions starting from 13.7 before 14.3.6, all versions st | MEDIUM 6.5 | 0.9 % | ||
| CVE-2020-13327 | >=13.4.0, <13.4.2 ; >=13.3.0, <13.3.7 ; >=13.2.0, <13.2.10 | An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions starting from 13.3.0 b | HIGH 7.5 | 0.7 % | ||
| CVE-2020-13347 | >=12.0.0, <13.2.4 ; >=13.3.0, <13.3.2 ; >=13.4.0, <13.4.1 | A command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3.2 and 13.4.1. When the runner is configured | CRITICAL 9.1 | 2.3 % | ||
| CVE-2020-13295 | >=1.0, <13.0.12 ; >=13.1, <13.1.6 ; >=13.2, <13.2.3 | For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF. | HIGH 8.8 | 1.2 % |