CVE-2019-9175

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure issue 3 of 5...

CVE-2019-9222

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions...

CVE-2019-9175

Summary: CVE-2019-9175 affects GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1, allowing information exposure. Affected software/versions: GitLab CE/EE up to 11.6.9; 11.7.x up to 11.7.5; 11.8.x up to 11.8.0. Root cause / impact: Header mentio...

GitLab Access Control Error Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An Access Control Error vulnerability exists in GitLab...

PT-2019-19414

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 11.6.10 and earlier GitLab Community and Enterprise Edition versions 11.7.x before 11.7.6 GitLab Community and Enterprise Edition versions 11.8.x before 11.8.1 Description An issue in GitLab...

CVE-2019-9176: Cross-Site Request Forgery (CSRF)

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows CSRF...

CVE-2019-9222: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions...

CVE-2019-9219: Authorization Bypass Through User-Controlled Key

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control issue 2 of 5...

CVE-2019-9225: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control issue 5 of 5...

CVE-2019-9179: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure issue 5 of 5...

PT-2019-19847

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 10.8 through 11.8.x GitLab Community and Enterprise Edition versions 11.7.x through 11.7.5 GitLab Community and Enterprise Edition versions 11.6.x through 11.6.9 GitLab Community and Enterprise...

CVE-2019-6796

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows XSS issue 2 of 2. The user status field contains a lack of input validation and output encoding that results in a persistent XSS...

CVE-2019-6796: Improper Neutralization of Input During Web Page Generation

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows XSS issue 2 of 2. The user status field contains a lack of input validation and output encoding that results in a persistent XSS...

CVE-2018-15635

Cross-site scripting vulnerability in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote attackers to inject arbitrary web script in the browser of an internal user of the system by tricking them into inviting a follower on a document with a...

GitLab Path Traversal Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A path traversal vulnerability exists in GitLab Community...

CVE-2018-20144

GitLab CVE-2018-20144 affects GitLab Community and Enterprise Edition 11.x before 11.3.13, 11.4.x before 11.4.11, and 11.5.x before 11.5.4 due to Incorrect Access Control. Exploitation details are not provided in the documents, but CNVD notes an arbitrary file read capability by an attacker. Root...

CVE-2018-20144

Removed by vendor...

CVE-2019-6240

An issue was discovered in GitLab Community and Enterprise Edition before 11.4. It allows Directory Traversal...

CVE-2019-6240: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in GitLab Community and Enterprise Edition before 11.4. It allows Directory Traversal...

CVE-2019-9093

A Reflected Cross Site Scripting XSS Vulnerability was discovered in file/file/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing a JavaScript payload in the filename parameter is echoed back, which resulted in reflected XSS...