UBUNTU-CVE-2022-0390

Improper access control in Gitlab CE/EE versions 12.7 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1 allowed for project non-members to retrieve issue details when it was linked to an item from the vulnerability dashboard...

UBUNTU-CVE-2022-0489

An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was possible to trigger a DOS by using the math feature with a specific formula in issue comments...

UBUNTU-CVE-2022-0373

Improper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4, and 12.6 to 14.7.1 allows project non-members to retrieve the service desk email address...

PT-2022-13174 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 7.9 and later Description: A DNS rebinding issue in the Irker IRC Gateway integration allows an attacker to trigger Server Side Request Forgery SSRF attacks. Recommendations: For GitLab CE/EE versions 7.9 and later, at t...

GitLab Community Edition和GitLab Enterprise Edition安全漏洞

GitLab Enterprise Edition is a content management system.GitLab Community Edition is a community edition of GitLab by GitLab, Inc. A security vulnerability exists in GitLab Community Edition CE and Enterprise Edition EE due to a business logic error in Project Import. A remote administrator could...

GitLab 缓冲区错误漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A buffer error vulnerability exists in GitLab CE/EE that allows an attacker to...

GitLab 跨站脚本漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A cross-site scripting vulnerability exists in GitLab CE/EE, which can be...

GitLab Community Edition和GitLab Enterprise Edition 信息泄露漏洞

GitLab Enterprise Edition is a content management system.GitLab Community Edition is a community edition of GitLab by GitLab, Inc. An information disclosure vulnerability exists in GitLab Community Edition CE and Enterprise Edition EE due to a lack of filtering in error messages. When the include...

GitLab Community Edition (CE) and Enterprise Edition (EE) 授权问题漏洞

GitLab Enterprise Edition is a content management system.GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An authorization issue vulnerability exists in GitLab Community Edition CE and Enterprise Edition EE due to incorrect authorization in the branch restriction featur...

GitLab Enterprise Edition和GitLab Community Edition 代码问题漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. A code issue exists in GitLab Enterprise Edition and GitLab Community Edition that stems from insufficient validation of user-supplied input in the repository...

GitLab 访问控制错误漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. An Access Control Error vulnerability exists in GitLab CE/EE, which stems from...

GitLab Community Edition和GitLab Enterprise Edition 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Community Edition CE and Enterprise Edition ...

GitLab Community Edition和GitLab Enterprise Edition 资源管理错误漏洞

GitLab Enterprise Edition is a content management system.GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An input validation error vulnerability exists in GitLab Community Edition CE and Enterprise Edition EE, which exists because there is no limit to the number of tag...

GitLab Community Edition和GitLab Enterprise Edition 资源管理错误漏洞

GitLab Enterprise Edition is a content management system GitLab Community Edition is a community edition of GitLab from GitLab, Inc. A resource management error vulnerability exists in GitLab Community Edition CE and Enterprise Edition EE due to insufficient validation of user-supplied input in...

PT-2022-2064 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 14.7 prior to 14.7.7 GitLab CE/EE versions 14.8 prior to 14.8.5 GitLab CE/EE versions 14.9 prior to 14.9.2 Description: A hardcoded password was set for accounts registered using an OmniAuth provider e.g. OAuth, LDAP, SA...

GitLab Community Edition和GitLab Enterprise Edition 授权问题漏洞

GitLab Enterprise Edition is a content management system.GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An authorization issue vulnerability exists in GitLab Community Edition CE and Enterprise Edition EE, which is vulnerable due to incorrect authorization in GitLab...

GitLab Community Edition和GitLab Enterprise Edition输入验证错误漏洞

GitLab Enterprise Edition is a content management system.GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An input validation error vulnerability exists in GitLab Community Edition CE and Enterprise Edition EE due to insufficient validation of user-supplied input in the...

GitLab Community Edition和GitLab Enterprise Edition 信任管理问题漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. A trust management issue vulnerability exists in GitLab Community Edition CE and Enterprise Edition EE due to the presence of hard-coded credentials in...

GitLab Enterprise Edition和GitLab Community Edition 信息泄露漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An information disclosure vulnerability exists in GitLab Enterprise Edition and GitLab Community Edition, which stems from the application outputting too much...

PT-2022-13149 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: Gitlab CE/EE versions 12.7 through 14.5.4 Gitlab CE/EE versions 14.6 through 14.6.4 Gitlab CE/EE versions 14.7 through 14.7.1 Description: The issue is related to improper access control, allowing project non-members to retrieve issue details...