3810 matches found
CVE-2020-7966
GitLab EE versions 11.11 through 12.7.2 contain a Directory Traversal vulnerability. The issue allows an attacker to read files on the server via crafted requests, constituting a risk to confidential data and system files. Public sources in multiple catalogs consistently describe the affected ran...
CVE-2020-7966
GitLab EE 11.11 and later through 12.7.2 allows Directory Traversal...
CVE-2020-7966
Removed by vendor...
CVE-2020-7967
GitLab EE versions 8.0 through 12.7.2 are affected by an insecure permissions issue (issue 1 of 2). Root cause: insecure permission handling in GitLab EE, enabling improper access control. Impact: information access/privilege exposure is implied; exact assets and vectors are not detailed in the p...
CVE-2020-7967
Removed by vendor...
CVE-2020-7967
GitLab EE 8.0 through 12.7.2 has Insecure Permissions issue 1 of 2...
CVE-2020-7968
GitLab Enterprise Edition (EE) versions 8.0 through 12.7.2 are affected by an Incorrect Access Control vulnerability. The issue is documented across multiple sources (including CVE-2020-7968) and aligns with a public remediation path: upgrading to GitLab EE 12.7.4 (security release) mitigates the...
CVE-2020-7968
GitLab EE 8.0 through 12.7.2 has Incorrect Access Control...
CVE-2020-7969
CVE-2020-7969 affects GitLab EE 8.0–12.7.2 and enables information disclosure. The embedded data show a HIGH-severity (CVSSv3.1 base score 7.5) vulnerability with network access and no authentication. Exploitation details are not provided in the documents. Remediation suggested by the sources is ...
CVE-2020-7969
Removed by vendor...
CVE-2020-7972
Removed by vendor...
CVE-2020-7972
GitLab EE 12.2 has Insecure Permissions issue 2 of 2...
CVE-2020-7972
CVE-2020-7972 concerns GitLab Enterprise Edition 12.2 with an insecure permissions/privilege vulnerability. Multiple connected sources identify GitLab EE 12.2 as affected and describe an insecure privilege condition (GitLab EE 12.2 vulnerability). The CVE status is corroborated across OSV/ CNVD /...
CVE-2020-7974
CVE-2020-7974 affects GitLab EE versions 10.1–12.7.2 and is described as an information disclosure vulnerability. The connected records corroborate this, listing GitLab EE 10.1 through 12.7.2 as affected and confirming the issue is an information disclosure vulnerability. The NVD/OSV records assi...
CVE-2020-7974
GitLab EE 10.1 through 12.7.2 allows Information Disclosure...
CVE-2020-7974
Removed by vendor...
CVE-2020-7976
GitLab EE 12.4 and later through 12.7.2 has Incorrect Access Control...
CVE-2020-7976
Removed by vendor...
CVE-2020-7976
GitLab EE versions 12.4 through 12.7.2 are reported to have an Incorrect Access Control vulnerability (CVE-2020-7976). The connected records corroborate the issue across multiple feeds (OSV, CNVD, NVD, CVE lists) and consistently reference GitLab EE 12.4–12.7.2. The primary details provided are t...