CVE-2017-0923

Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site scripting...

CVE-2017-0924

Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scripting...

CVE-2017-0926

Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component resulting in unauthorized user login...

CVE-2017-0927

Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users...

CVE-2017-0918

GitLab CE 10.3 is affected by a path traversal vulnerability in the GitLab CI runner that allows remote code execution. This CVE-2017-0918 entry is supported by multiple sources (NVD details, OSV/Ubuntu, Debian DSA-4145). Impact: high (CVSSv3: 8.8) with network vector, unauthenticated user intera...

CVE-2018-3710

CVE-2018-3710 affects GitLab Community/Enterprise Edition 10.3.3, with an insecure temporary file in the project import component enabling remote code execution. Multiple sources (NVD, Debian DSA, CNVD, OSV) corroborate an arbitrary code execution via project import; CVE-2018-3710 is part of a se...

CVE-2017-0916

Removed by vendor...

CVE-2017-0927

Removed by vendor...

CVE-2017-0924

Removed by vendor...

CVE-2017-0918

Removed by vendor...

CVE-2017-0917

Removed by vendor...

CVE-2017-0915

Gitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the GitlabProjectsImportService resulting in remote code execution...

CVE-2017-0918

Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution...

CVE-2017-0916

GitLab Community Edition (CE) 10.3 is vulnerable to remote code execution due to a lack of input validation in the system_hook_push queue via the web hook component. This is caused by improper input validation in the affected code path, as documented by multiple sources (NVD entry CVE-2017-0916; ...

CVE-2017-0924: Improper Neutralization of Input During Web Page Generation

Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scripting...

PT-2018-5151

Name of the Vulnerable Software and Affected Versions Gitlab Community Edition version 10.2.4 Description The issue is related to a lack of input validation in the labels component, resulting in persistent cross-site scripting. Recommendations For Gitlab Community Edition version 10.2.4, update t...

PT-2018-5150

Name of the Vulnerable Software and Affected Versions Gitlab Community Edition version 9.1 Description The issue is related to a lack of input validation in the IPython notebooks component, resulting in persistent cross-site scripting. Recommendations For Gitlab Community Edition version 9.1,...

CVE-2017-0926: Improper Authorization

Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component resulting in unauthorized user login...

CVE-2017-0923: Improper Neutralization of Input During Web Page Generation

Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site scripting...

CVE-2017-0927: Improper Authorization

Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users...