Skip to content

GitLab · weakness class

Open Redirect

18 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 18 is a mark on the map. Named now: 1 to 18, most at risk first.

  1. An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows an attacker to redirect us…CVE-2022-2250GitLab · CVSS 4.7 · 1.7% likely

    CWE-601

  2. An Open Redirect issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. A redirect is triggered after succe…CVE-2019-10117Gitlab · 1.3% likely

    CWE-601

  3. An Improper Input Validation issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It was possible to use…CVE-2019-6781Gitlab · 1.2% likely

    CWE-601

  4. An open redirect vulnerability in GitLab EE/CE affecting all versions from 9.3 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2, allows an attacker to redirect user…CVE-2022-3486GitLab · CVSS 4.7 · 0.9% likely

    CWE-601

  5. An issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10.1. Open redirects was possible due to framing arbitrary content on any page allowi…CVE-2023-0155GitLab · CVSS 5.4 · 0.8% likely

    CWE-601

  6. An issue has been discovered affecting GitLab versions prior to 13.5. An open redirect vulnerability was fixed in GitLab integration with Jira that a could cause the web applicati…CVE-2022-0283GitLab · CVSS 4.7 · 0.8% likely

    CWE-601

  7. An issue was discovered in GitLab Community and Enterprise Edition 10.7.4 through 12.4 in the InternalRedirect filtering feature. It has an Open Redirect.CVE-2019-18451Gitlab · 0.7% likely

    CWE-601

  8. An open redirect in GitLab CE/EE affecting all versions from 10.1 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to trick users into visiting a…CVE-2022-3280GitLab · CVSS 3.5 · 0.7% likely

    CWE-601

  9. An issue has been discovered in GitLab affecting all versions starting from 10.0 to 15.7.8, 15.8 prior to 15.8.4 and 15.9 prior to 15.9.2. A crafted URL could be used to redirect…CVE-2022-3381GitLab · CVSS 4.3 · 0.6% likely

    CWE-601

  10. An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects.CVE-2022-4317GitLab · CVSS 5 · 0.5% likely

    CWE-601

  11. URL Redirection to Untrusted Site ('Open Redirect') in GitLabCVE-2024-11274GitLab · CVSS 8.7 · 0.5% likely

    CWE-601

  12. URL Redirection to Untrusted Site ('Open Redirect') in GitLabCVE-2023-3922GitLab · CVSS 3 · 0.4% likely

    CWE-601

  13. An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2. GitLab Pages allows redirec…CVE-2023-0042GitLab · CVSS 6.1 · 0.4% likely

    CWE-601

  14. URL Redirection to Untrusted Site ('Open Redirect') in GitLabCVE-2024-4612GitLab · CVSS 6.4 · 0.4% likely

    CWE-601

  15. URL Redirection to Untrusted Site ('Open Redirect') in GitLabCVE-2024-9387GitLab · CVSS 6.4 · 0.4% likely

    CWE-601

  16. URL Redirection to Untrusted Site ('Open Redirect') in GitLabCVE-2024-4283GitLab · CVSS 6.4 · 0.4% likely

    CWE-601

  17. URL Redirection to Untrusted Site in GitLabCVE-2023-1279GitLab · CVSS 2.6 · 0.4% likely

    CWE-601

  18. URL Redirection to Untrusted Site ('Open Redirect') in GitLabCVE-2026-7767GitLab · CVSS 5.8 · 0.3% likely

    CWE-601

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.