Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

[ASA-202106-21] gitlab: multiple issues

🗓️ 09 Jun 2021 00:00:00Reported by ArchLinuxType 
archlinux
 archlinux🔗 security.archlinux.org👁 132 Views

gitlab multiple issues denial of service information disclosure access restriction bypas

Related
Packages
Refs
ReporterTitlePublishedViews
Family
GithubExploit		Exploit for Server-Side Request Forgery in Gitlab
4 Jan 202205:52
–githubexploit
FreeBSD		Gitlab -- Multiple Vulnerabilities
1 Jun 202100:00
–freebsd
BDU FSTEC		The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.
20 Sep 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to information disclosure, allows attackers to gain access to confidential data.
20 Sep 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from insufficient validation of incoming requests, allowing a hacker to gain access to confidential data.
20 Sep 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.
20 Sep 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.
20 Sep 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to errors in the certificate validation process, which allows attackers to compromise data integrity.
20 Sep 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from insufficient protection of registration data, allowing attackers to access confidential information.
20 Sep 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the text file viewing tool in the Git-based software platform for collaborative code development on GitLab arises from the lack of protective measures for website structure. This allows attackers to compromise data integrity.
20 Sep 202100:00
–bdu_fstec
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Arch Linux–anygitlab13.12.2-1gitlab-13.12.2-1-any.pkg.tar.zst

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
09 Jun 2021 00:00Current
1.6Low risk
Vulners AI Score1.6
CVSS 26.4
CVSS 3.18.6 - 8.8
EPSS0.27806
gitlab security denialofservice informationdisclosure accessrestrictionbypass authenticationbypass crosssitescripting spoofing resourceconsumption upstreamfix vulnerability cve-2021-22181 cve-2021-22213 cve-2021-22214 cve-2021-22216 cve-2021-22217 cve-2021-22218 cve-2021-22219 cve-2021-22220 cve-2021-22221.
132