CVE Feed

    Dashboard / CVE / CVE-2016-9469

    CVE-2016-9469

    Multiple versions of GitLab expose a dangerous method to any authenticated user that could lead to the deletion of all Issue and MergeRequest objects on a GitLab instance. For GitLab instances with publicly available projects this vulnerability could be exploited by an unauthenticated user. A fix was included in versions 8.14.3, 8.13.8, and 8.12.11, which were released on December 5th 2016 at 3:59 PST. The GitLab versions vulnerable to this are 8.13.0, 8.13.0-ee, 8.13.1, 8.13.1-ee, 8.13.2, 8.13.2-ee, 8.13.3, 8.13.3-ee, 8.13.4, 8.13.4-ee, 8.13.5, 8.13.5-ee, 8.13.6, 8.13.6-ee, 8.13.7, 8.14.0, 8.14.0-ee, 8.14.1, 8.14.2, and 8.14.2-ee.

    Published:Mar 28, 2017
    Last Modified:Apr 20, 2025
    EPS:Mar 28, 2017
    EPSS Score:0.00135
    CVSS Score:8.2

    Affected Products

    Vendor
    Gitlab
    Product
    Gitlab

    Exploits

    https://gitlab.com/gitlab-org/gitlab-ce/issues/25064https://hackerone.com/reports/186194https://gitlab.com/gitlab-org/gitlab-ce/issues/25064https://hackerone.com/reports/186194

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-500 WebView Injection

    Related CVEs

    CVE-2026-75871 (CVSS 8.2) — GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gate…
    CVE-2025-10903 (CVSS 6.5) — GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 19.1.7, 19.2 before 19.2.…
    CVE-2026-3035 (CVSS 5.5) — GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 19.1.7, 19.2 before 19.2.5…
    CVE-2026-7487 (CVSS 3.5) — GitLab has remediated an issue in GitLab EE affecting all versions from 13.1 before 19.1.7, 19.2 before 19.2.5…
    CVE-2026-15387 (CVSS 4.3) — GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.7, 19.2 before 19.2.5…
    CVE-2026-18252 (CVSS 7.3) — GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before 19.1.7, 19.2 before 19.2.5…
    CVE-2026-77801 (CVSS 6.5) — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.1.7, 19.2 before 19.…
    CVE-2026-10053 (CVSS 8.5) — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.…
    CVE-2026-19650 (CVSS 7.1) — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 1…
    CVE-2026-19478 (CVSS 9.4) — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 1…

    References

    https://about.gitlab.com/2016/12/05/cve-2016-9469/
    https://gitlab.com/gitlab-org/gitlab-ce/commit/29ceb98b5162677601702704e89d845580372078
    https://gitlab.com/gitlab-org/gitlab-ce/commit/55196497301eea429913f9c4b1b37c42c2e358ce
    https://gitlab.com/gitlab-org/gitlab-ce/commit/f325e4e734e5e486f3b02db176eb629124052b43
    https://gitlab.com/gitlab-org/gitlab-ce/issues/25064
    https://hackerone.com/reports/186194
    https://about.gitlab.com/2016/12/05/cve-2016-9469/
    https://gitlab.com/gitlab-org/gitlab-ce/commit/29ceb98b5162677601702704e89d845580372078
    https://gitlab.com/gitlab-org/gitlab-ce/commit/55196497301eea429913f9c4b1b37c42c2e358ce
    https://gitlab.com/gitlab-org/gitlab-ce/commit/f325e4e734e5e486f3b02db176eb629124052b43
    https://gitlab.com/gitlab-org/gitlab-ce/issues/25064
    https://hackerone.com/reports/186194

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High