3461 matches found
CVE-2017-0917
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in persistent cross site scripting...
CVE-2017-0916
Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the systemhookpush queue through web hook component resulting in remote code execution...
CVE-2017-0915
Gitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the GitlabProjectsImportService resulting in remote code execution...
CVE-2017-0926
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component resulting in unauthorized user login...
CVE-2017-0927
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users...
CVE-2017-0924
Removed by vendor...
CVE-2017-0923
Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site scripting...
CVE-2017-0927
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users...
CVE-2017-0918
Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution...
CVE-2018-3710
CVE-2018-3710 affects GitLab Community/Enterprise Edition 10.3.3, with an insecure temporary file in the project import component enabling remote code execution. Multiple sources (NVD, Debian DSA, CNVD, OSV) corroborate an arbitrary code execution via project import; CVE-2018-3710 is part of a se...
CVE-2017-0915
Gitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the GitlabProjectsImportService resulting in remote code execution...
CVE-2017-0918
GitLab CE 10.3 is affected by a path traversal vulnerability in the GitLab CI runner that allows remote code execution. This CVE-2017-0918 entry is supported by multiple sources (NVD details, OSV/Ubuntu, Debian DSA-4145). Impact: high (CVSSv3: 8.8) with network vector, unauthenticated user intera...
CVE-2017-0916
GitLab Community Edition (CE) 10.3 is vulnerable to remote code execution due to a lack of input validation in the system_hook_push queue via the web hook component. This is caused by improper input validation in the affected code path, as documented by multiple sources (NVD entry CVE-2017-0916; ...
CVE-2017-0926
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component resulting in unauthorized user login...
CVE-2017-0918
Removed by vendor...
CVE-2017-0917
Removed by vendor...
CVE-2017-0924
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scripting...
CVE-2017-0916
Removed by vendor...