The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f7c5b3a9-b9fb-11ed-99c6-001b217b3468 advisory.

  - An issue has been discovered in GitLab affecting all versions starting from 10.0 to 15.7.8, 15.8 prior to     15.8.4 and 15.9 prior to 15.9.2. A crafted URL could be used to redirect users to arbitrary sites. This is     a medium severity issue (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N, 4.3). It is now mitigated in the     latest release and is assigned CVE-2022-3381. (CVE-2022-3381)

  - An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all     versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. Due to improper     permissions checks an unauthorised user was able to read, add or edit a users private snippet. This is a     medium severity issue (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N, 5.4). It is now mitigated in the     latest release and is assigned CVE-2022-3758. (CVE-2022-3758)

  - A issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8, version 15.8     prior to 15.8.4, and version 15.9 prior to 15.9.2  A cross-site scripting vulnerability was found in the     title field of work items that allowed attackers to perform arbitrary actions on behalf of victims at     client side. This is a medium severity issue (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N, 5.4). It is     now mitigated in the latest release and is assigned CVE-2022-4007. (CVE-2022-4007)

  - An issue has been discovered in GitLab affecting all versions starting from 15.3 before 15.7.8, versions     of 15.8 before 15.8.4, and version 15.9 before 15.9.2. Google IAP details in Prometheus integration were     not hidden, could be leaked from instance, group, or project settings to other users. This is a medium     severity issue (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N, 6.4). It is now mitigated in the latest     release and is assigned CVE-2022-4289. (CVE-2022-4289)

  - An issue has been discovered in GitLab EE affecting all versions starting from 15.1 before 15.7.8, all     versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. If a group with     SAML SSO enabled is transferred to a new namespace as a child group, it's possible previously removed     malicious maintainer or owner of the child group can still gain access to the group via SSO or a SCIM     token to perform actions on the group. This is a medium severity issue     (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N, 5.7). It is now mitigated in the latest release and is     assigned CVE-2022-4331. (CVE-2022-4331)

  - An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.7.8, all     versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. This     vulnerability could allow a user to unmask the Discord Webhook URL through viewing the raw API response.
    This is a medium severity issue (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N, 5.0). It is now mitigated     in the latest release and is assigned CVE-2022-4462. (CVE-2022-4462)

  - An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all     versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. A specially     crafted Kroki diagram could lead to a stored XSS on the client side which allows attackers to perform     arbitrary actions on behalf of victims. This is a high severity issue     (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N, 8.7). It is now mitigated in the latest release and is     assigned CVE-2023-0050. (CVE-2023-0050)

  - An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all     versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. Non-project     members could retrieve release descriptions via the API, even if the release visibility is restricted to     project members only in the project settings. This is a medium severity issue     (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, 5.3). It is now mitigated in the latest release and is     assigned CVE-2023-0223. (CVE-2023-0223)

  - An issue has been discovered in GitLab affecting all versions starting from 12.1 before 15.7.8, all     versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. It was possible     for a project maintainer to extract a Datadog integration API key by modifying the site. This is a medium     severity issue (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N, 5.5). It is now mitigated in the latest     release and is assigned CVE-2023-0483. (CVE-2023-0483)

  - An issue has been discovered in GitLab affecting all versions starting from 9.0 before 15.7.8, all     versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. It was possible     to trigger a resource depletion attack due to improper filtering for number of requests to read commits     details. This is a medium severity issue (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L, 4.3). It is now     mitigated in the latest release and is assigned CVE-2023-1072. (CVE-2023-1072)

  - An issue has been discovered in GitLab CE/EE affecting all versions before 15.7.8, all versions starting     from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. A malicious project Maintainer may     create a Project Access Token with Owner level privileges using a crafted request. This is a low severity     issue (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N, 2.7). It is now mitigated in the latest release and     is assigned CVE-2023-1084. (CVE-2023-1084)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

FreeBSD : Gitlab -- Multiple Vulnerabilities (f7c5b3a9-b9fb-11ed-99c6-001b217b3468)

high Nessus Plugin ID 172086

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.3 Apr 6, 2023, 6:58 PM IAVM reference Plugin Feed: 202304061858
Version 1.2 Mar 22, 2023, 4:37 PM CVSS metrics ("CVSSv3 score" changed from "8.7" to "7.3". "CVSSv3 score" changed from "8.7" to "7.3". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N" to "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N" to "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N" to "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N") CVSSv2 score source (changed from "CVE-2023-0050" to "CVE-2022-4331") CVSSv3 score source (set to "CVE-2022-4331") Plugin Feed: 202303221637
Version 1.1 Mar 10, 2023, 10:21 AM IAVM reference STIG Severity (set to "I") Plugin Feed: 202303101021
Version 1.0 Mar 4, 2023, 12:04 AM New Plugin Feed: 202303040004