GitLab Community and Enterprise Edition Access Control Error Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An access control error vulnerability exists in GitLab...

GitLab CE and EE Information Disclosure Vulnerability (CNVD-2019-23581)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...

GitLab CE/EE Login HMAC Vulnerability

GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository, which has similar functionality to Github for accessing the contents of a project's files, commit history, bug lists, and more. A security...

CVE-2019-10112: Inadequate Encryption Strength

An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The construction of the HMAC key was insecurely derived...

CVE-2019-10116: Incorrect Permission Assignment for Critical Resource

An Insecure Permissions issue issue 3 of 3 was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. Guests of a project were allowed to see Related Branches created for an issue...

CVE-2019-10114: Observable Discrepancy

An Information Exposure issue issue 2 of 2 was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. During the OAuth authentication process, the application attempts to validate a parameter in an insecure way, potentially exposing da...

GitLab CE and EE Uncontrolled Resource Consumption Vulnerability

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. An uncontrolled resource consumption vulnerability exists in GitLab CE and EE. The vulnerability...

Improper access control

GitLab Community and Enterprise Edition 8.9 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 has Incorrect Access Control...

CVE-2018-19359

GitLab Community and Enterprise Edition 8.9 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 has Incorrect Access Control...

Improper access control

An issue was discovered in GitLab Community and Enterprise Edition 10.x starting from 10.8 and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control, a different vulnerability than CVE-2019-9732...

CVE-2019-9222

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions...

CVE-2019-9175

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure issue 3 of 5...

CVE-2019-9217

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. Its User Interface has a Misrepresentation of Critical Information...

UBUNTU-CVE-2019-9175

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure issue 3 of 5...

CVE-2019-9175

Summary: CVE-2019-9175 affects GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1, allowing information exposure. Affected software/versions: GitLab CE/EE up to 11.6.9; 11.7.x up to 11.7.5; 11.8.x up to 11.8.0. Root cause / impact: Header mentio...

GitLab Access Control Error Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An Access Control Error vulnerability exists in GitLab...

PT-2019-19414

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 11.6.10 and earlier GitLab Community and Enterprise Edition versions 11.7.x before 11.7.6 GitLab Community and Enterprise Edition versions 11.8.x before 11.8.1 Description An issue in GitLab...

PT-2019-19847

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 10.8 through 11.8.x GitLab Community and Enterprise Edition versions 11.7.x through 11.7.5 GitLab Community and Enterprise Edition versions 11.6.x through 11.6.9 GitLab Community and Enterprise...

CVE-2019-9222: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions...

CVE-2019-9225: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control issue 5 of 5...