4832 matches found
Information disclosure
GitLab EE 8.0 and later through 12.7.2 allows Information Disclosure...
Improper access control
GitLab EE 12.4 and later through 12.7.2 has Incorrect Access Control...
Denial of service
GitLab EE 12.6 and later through 12.7.2 allows Denial of Service...
CVE-2020-7968
GitLab EE 8.0 through 12.7.2 has Incorrect Access Control...
CVE-2020-7972
GitLab EE 12.2 has Insecure Permissions issue 2 of 2...
CVE-2020-7967
GitLab EE 8.0 through 12.7.2 has Insecure Permissions issue 1 of 2...
CVE-2020-7966
Removed by vendor...
CVE-2020-7966
GitLab EE versions 11.11 through 12.7.2 contain a Directory Traversal vulnerability. The issue allows an attacker to read files on the server via crafted requests, constituting a risk to confidential data and system files. Public sources in multiple catalogs consistently describe the affected ran...
CVE-2020-7966
GitLab EE 11.11 and later through 12.7.2 allows Directory Traversal...
CVE-2020-7967
GitLab EE 8.0 through 12.7.2 has Insecure Permissions issue 1 of 2...
CVE-2020-7967
Removed by vendor...
CVE-2020-7967
GitLab EE versions 8.0 through 12.7.2 are affected by an insecure permissions issue (issue 1 of 2). Root cause: insecure permission handling in GitLab EE, enabling improper access control. Impact: information access/privilege exposure is implied; exact assets and vectors are not detailed in the p...
CVE-2020-7968
GitLab EE 8.0 through 12.7.2 has Incorrect Access Control...
CVE-2020-7968
GitLab Enterprise Edition (EE) versions 8.0 through 12.7.2 are affected by an Incorrect Access Control vulnerability. The issue is documented across multiple sources (including CVE-2020-7968) and aligns with a public remediation path: upgrading to GitLab EE 12.7.4 (security release) mitigates the...
CVE-2020-7969
CVE-2020-7969 affects GitLab EE 8.0–12.7.2 and enables information disclosure. The embedded data show a HIGH-severity (CVSSv3.1 base score 7.5) vulnerability with network access and no authentication. Exploitation details are not provided in the documents. Remediation suggested by the sources is ...
CVE-2020-7969
Removed by vendor...
CVE-2020-7972
GitLab EE 12.2 has Insecure Permissions issue 2 of 2...
CVE-2020-7972
CVE-2020-7972 concerns GitLab Enterprise Edition 12.2 with an insecure permissions/privilege vulnerability. Multiple connected sources identify GitLab EE 12.2 as affected and describe an insecure privilege condition (GitLab EE 12.2 vulnerability). The CVE status is corroborated across OSV/ CNVD /...