Input Validation and Logic

Every one of the 58 is a mark on the map. Named now: 1 to 26, most at risk first.

1. A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which could result in SSRF where the library is utilized.CVE-2019-5464GitLab · 2.8% likely

   CWE-20

2. A lack of length validation in Snippet descriptions in GitLab CE/EE affecting all versions prior to 15.1.6, 15.2 prior to 15.2.4 and 15.3 prior to 15.3.2 allows an authenticated a…CVE-2022-2592GitLab · CVSS 6.5 · 1.5% likely

   CWE-1284

3. A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Wiki was vulnerable to a parser attack that prohibits anyone from accessing the Wiki functiona…CVE-2020-13311GitLab · CVSS 4.3 · 1.5% likely

   CWE-706

4. A potential DoS vulnerability was discovered in Gitlab CE/EE versions 13.7 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.…CVE-2022-1174GitLab · CVSS 4.3 · 1.5% likely

   CWE-1284

5. A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8, and 13.3.4. An insufficient check in the GraphQL api allowed a maintainer to delete a repository.CVE-2020-13317GitLab · CVSS 6.5 · 1.4% likely

   CWE-20

6. An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.…CVE-2021-39917GitLab · CVSS 4.3 · 1.4% likely

   CWE-697

7. Improper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in a project impossible to viewCVE-2021-22245GitLab · CVSS 2.7 · 1.4% likely

   CWE-20

8. An unhandled exception in job log parsing in GitLab CE/EE affecting all versions prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an attacker to prevent acce…CVE-2022-3279GitLab · CVSS 2.7 · 1.2% likely

   CWE-755

9. Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0 allows a Developer to read protec…CVE-2022-1406GitLab · CVSS 6.5 · 1.2% likely

   CWE-20

10. Improper Validation of Specified Type of Input in GitLabCVE-2023-4522GitLab · CVSS 4.3 · 1.2% likely

    CWE-1287

11. Unchecked Return Value in GitLabCVE-2026-0723GitLab · CVSS 7.4 · 1.0% likelycovered by CyberSIXT

    CWE-252

12. Improper Validation of Specified Type of Input in GitLabCVE-2023-3917GitLab · CVSS 4.3 · 0.9% likely

    CWE-1287

13. Improper Validation of Specified Type of Input in GitLabCVE-2023-3900GitLab · CVSS 4.3 · 0.9% likely

    CWE-1287

14. An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.…CVE-2021-39932GitLab · CVSS 4.3 · 0.9% likely

    CWE-20

15. Improper Validation of Specified Type of Input in GitLabCVE-2023-3904GitLab · CVSS 4.3 · 0.8% likely

    CWE-1287

16. Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host.CVE-2022-3767GitLab · CVSS 7.7 · 0.8% likely

    CWE-20

17. Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an authenticated and authorised us…CVE-2022-2417GitLab · CVSS 6.2 · 0.7% likely

    CWE-20

18. Incorrect Ownership Assignment in GitLabCVE-2023-4008GitLab · CVSS 5.3 · 0.7% likely

    CWE-708

19. Improper Validation of Specified Quantity in Input in GitLabCVE-2025-12664GitLab · CVSS 7.5 · 0.6% likely

    CWE-1284

20. Improper Validation of Specified Type of Input in GitLabCVE-2023-3906GitLab · CVSS 3.5 · 0.6% likely

    CWE-1287

21. Improper Validation of Specified Quantity in Input in GitLabCVE-2026-1092GitLab · CVSS 7.5 · 0.6% likely

    CWE-1284

22. Improper Validation of Specified Quantity in Input in GitLabCVE-2025-14513GitLab · CVSS 7.5 · 0.6% likely

    CWE-1284

23. Improper Validation of Specified Quantity in Input in GitLabCVE-2025-2256GitLab · CVSS 7.5 · 0.5% likely

    CWE-1284

24. Improper Validation of Consistency within Input in GitLabCVE-2024-12093GitLab · CVSS 6.8 · 0.5% likely

    CWE-1288

25. Incorrect Ownership Assignment in GitLabCVE-2024-9633GitLab · CVSS 3.1 · 0.5% likely

    CWE-708

26. Improper Validation of Specified Quantity in Input in GitLabCVE-2025-10094GitLab · CVSS 6.5 · 0.5% likely

    CWE-1284

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.