Filtered by vendor Gitlab
Subscriptions
Total
981 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2020-10980 | 1 Gitlab | 1 Gitlab | 2020-04-09 | 9.8 Critical |
| GitLab EE/CE 8.0.rc1 to 12.9 is vulnerable to a blind SSRF in the FogBugz integration. | ||||
| CVE-2020-10956 | 1 Gitlab | 1 Gitlab | 2020-04-01 | 9.8 Critical |
| GitLab 8.10 and later through 12.9 is vulnerable to an SSRF in a project import note feature. | ||||
| CVE-2020-10953 | 1 Gitlab | 1 Gitlab | 2020-03-31 | 7.5 High |
| In GitLab EE 11.7 through 12.9, the NPM feature is vulnerable to a path traversal issue. | ||||
| CVE-2020-10954 | 1 Gitlab | 1 Gitlab | 2020-03-31 | 7.5 High |
| GitLab through 12.9 is affected by a potential DoS in repository archive download. | ||||
| CVE-2020-10079 | 1 Gitlab | 1 Gitlab | 2020-03-18 | 5.3 Medium |
| GitLab 7.10 through 12.8.1 has Incorrect Access Control. Under certain conditions where users should have been required to configure two-factor authentication, it was not being required. | ||||
| CVE-2020-10074 | 1 Gitlab | 1 Gitlab | 2020-03-18 | 9.8 Critical |
| GitLab 10.1 through 12.8.1 has Incorrect Access Control. A scenario was discovered in which a GitLab account could be taken over through an expired link. | ||||
| CVE-2020-10077 | 1 Gitlab | 1 Gitlab | 2020-03-18 | 9.8 Critical |
| GitLab EE 3.0 through 12.8.1 allows SSRF. An internal investigation revealed that a particular deprecated service was creating a server side request forgery risk. | ||||
| CVE-2020-8113 | 1 Gitlab | 1 Gitlab | 2020-03-18 | 9.8 Critical |
| GitLab 10.7 and later through 12.7.2 has Incorrect Access Control. | ||||
| CVE-2020-10083 | 1 Gitlab | 1 Gitlab | 2020-03-17 | 9.1 Critical |
| GitLab 12.7 through 12.8.1 has Insecure Permissions. Under certain conditions involving groups, project authorization changes were not being applied. | ||||
| CVE-2020-10078 | 1 Gitlab | 1 Gitlab | 2020-03-17 | 6.1 Medium |
| GitLab 12.1 through 12.8.1 allows XSS. The merge request submission form was determined to have a stored cross-site scripting vulnerability. | ||||
| CVE-2020-10076 | 1 Gitlab | 1 Gitlab | 2020-03-17 | 6.1 Medium |
| GitLab 12.1 through 12.8.1 allows XSS. A stored cross-site scripting vulnerability was discovered when displaying merge requests. | ||||
| CVE-2020-10082 | 1 Gitlab | 1 Gitlab | 2020-03-17 | 5.3 Medium |
| GitLab 12.2 through 12.8.1 allows Denial of Service. A denial of service vulnerability impacting the designs for public issues was discovered. | ||||
| CVE-2020-10535 | 1 Gitlab | 1 Gitlab | 2020-03-17 | 5.3 Medium |
| GitLab 12.8.x before 12.8.6, when sign-up is enabled, allows remote attackers to bypass email domain restrictions within the two-day grace period for an unconfirmed email address. | ||||
| CVE-2020-10086 | 1 Gitlab | 1 Gitlab | 2020-03-17 | 5.3 Medium |
| GitLab 10.4 through 12.8.1 allows Directory Traversal. A particular endpoint was vulnerable to a directory traversal vulnerability, leading to arbitrary file read. | ||||
| CVE-2020-10089 | 1 Gitlab | 1 Gitlab | 2020-03-17 | 7.5 High |
| GitLab 8.11 through 12.8.1 allows a Denial of Service when using several features to recursively request eachother, | ||||
| CVE-2020-10090 | 1 Gitlab | 1 Gitlab | 2020-03-17 | 5.3 Medium |
| GitLab 11.7 through 12.8.1 allows Information Disclosure. Under certain group conditions, group epic information was unintentionally being disclosed. | ||||
| CVE-2020-10091 | 1 Gitlab | 1 Gitlab | 2020-03-16 | 6.1 Medium |
| GitLab 9.3 through 12.8.1 allows XSS. A cross-site scripting vulnerability was found when viewing particular file types. | ||||
| CVE-2020-10092 | 1 Gitlab | 1 Gitlab | 2020-03-16 | 6.1 Medium |
| GitLab 12.1 through 12.8.1 allows XSS. A cross-site scripting vulnerability was present in a particular view relating to the Grafana integration. | ||||
| CVE-2019-13121 | 1 Gitlab | 1 Gitlab | 2020-03-11 | 7.5 High |
| An issue was discovered in GitLab Enterprise Edition 10.6 through 12.0.2. The GitHub project integration was vulnerable to an SSRF vulnerability which allowed an attacker to make requests to local network resources. It has Incorrect Access Control. | ||||
| CVE-2019-13004 | 1 Gitlab | 1 Gitlab | 2020-03-11 | 5.3 Medium |
| An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.0.2. When specific encoded characters were added to comments, the comments section would become inaccessible. It has Incorrect Access Control (issue 1 of 2). | ||||