← All credits
Thanks [js_noob](https://hackerone.com/js_noob) for reporting this vulnerability through our HackerOne bug bounty program
14 vulnerability records and advisories credit this contributor.
CVE-2023-3964
Incorrect Authorization in GitLab
CVE-2023-3917
Improper Validation of Specified Type of Input in GitLab
CVE-2023-6840
Missing Authorization in GitLab
CVE-2023-4317
Incorrect Authorization in GitLab
CVE-2023-3511
Incorrect Authorization in GitLab
CVE-2023-2233
Missing Authorization in GitLab
CVE-2023-2022
Missing Authorization in GitLab
CVE-2023-2069
An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions starting from 13.0 before 13.0.1. A user with the role of developer could use the import project
CVE-2023-1621
An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.5, all versions starting from 15.11 before 15.11.1. A malicious group member may continue to commit to projects even from a restricted IP address.
CVE-2024-5005
Incorrect Provision of Specified Functionality in GitLab