76 matches found
GitLab EE Information Disclosure Vulnerability (CNVD-2020-13699)
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE 10.1 - 12.7.2 suffers from an information disclosu...
GitLab EE Directory Traversal Vulnerability
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. A directory traversal vulnerability exists in GitLab EE 11.1...
GitLab Cross-Site Scripting Vulnerability (CNVD-2020-05098)
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A cross-site scripting vulnerability exists in GitLab 12.7.2 and earlier versions. No details of th...
CVE-2020-7973
GitLab through 12.7.2 allows XSS...
CVE-2020-7973
GitLab through 12.7.2 allows XSS...
CVE-2020-7976
GitLab EE 12.4 and later through 12.7.2 has Incorrect Access Control...
CVE-2020-7971
GitLab EE 11.0 and later through 12.7.2 allows XSS...
CVE-2020-7968
GitLab EE 8.0 through 12.7.2 has Incorrect Access Control...
CVE-2020-7969
GitLab EE 8.0 and later through 12.7.2 allows Information Disclosure...
CVE-2020-7967
GitLab EE 8.0 through 12.7.2 has Insecure Permissions issue 1 of 2...
CVE-2020-7968
GitLab EE 8.0 through 12.7.2 has Incorrect Access Control...
CVE-2020-7974
GitLab EE 10.1 through 12.7.2 allows Information Disclosure...
CVE-2020-7973
GitLab through 12.7.2 allows XSS...
Improper access control
GitLab EE 8.0 through 12.7.2 has Incorrect Access Control...
CVE-2020-7968
GitLab EE 8.0 through 12.7.2 has Incorrect Access Control...
Improper access control
GitLab EE 12.4 and later through 12.7.2 has Incorrect Access Control...
CVE-2020-7969
Removed by vendor...
CVE-2020-7973
GitLab up to version 12.7.2 is affected by a Cross-Site Scripting (XSS) vulnerability. Technical details across sources consistently state that GitLab 12.7.2 and earlier are vulnerable to XSS; some references note an updated release (12.7.4) addressing the issue. The affected product is the GitLa...
