UpHeron
All vulnerabilities

Servers and applications

CVE-2016-9469

Multiple versions of GitLab expose a dangerous method to any authenticated user that could lead to the deletion of all Issue and MergeRequest objects on a GitLab instance. For GitLab instances with publicly available projects this vulnerability could be exploited by an unauthenticated user. A fix was included in versions 8.14.3, 8.13.8, and 8.12.11, which were released on December 5th 2016 at…

Severity
High 8.2
Published
28 Mar 2017
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
GitLabServers and applications · cpe:a:gitlab:gitlab
  • Version 8.14.2
  • Version 8.14.1
  • Version 8.14.0
  • Version 8.13.7
All 11 release lines
  • Version 8.13.0
  • Version 8.13.1
  • Version 8.13.2
  • Version 8.13.3
  • Version 8.13.4
  • Version 8.13.5
  • Version 8.13.6
  • Version 8.13.7
  • Version 8.14.0
  • Version 8.14.1
  • Version 8.14.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2016-9469
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2016-9469