CVE-2020-7977

GitLab EE 8.8 and later through 12.7.2 has Insecure Permissions...

CVE-2020-7978

GitLab EE versions 12.6 through 12.7.2 are affected by a Denial of Service vulnerability (CVE-2020-7978). The available documents consistently state DoS as the impact; no concrete root-cause or exploitation details are provided in the sources. The initial entry confirms affected ranges but does n...

CVE-2020-7979

GitLab EE 8.9 and later through 12.7.2 has Insecure Permission...

CVE-2020-8114

GitLab EE 8.9 and later through 12.7.2 has Insecure Permission...

CVE-2020-7979

GitLab EE 8.9 and later through 12.7.2 has Insecure Permission...

CVE-2020-7979

CVE-2020-7979 affects GitLab EE versions 8.9 through 12.7.2 with an Insecure Permission issue. The connected OSV/NVD entries corroborate this vulnerability family but do not provide exploit details, specific root cause, or a published mitigation within the supplied documents. Affected software is...

CVE-2020-8114

CVE-2020-8114 affects GitLab EE 8.9 through 12.7.2 with an insecure permission issue (privilege-related). The vulnerability is described consistently across multiple sources (OSV, CNVD, NVD, CNVD clones). Impact is marked high (CP/I/H/A), but exploitation details are not provided in the documents...

CVE-2020-8114

GitLab EE 8.9 and later through 12.7.2 has Insecure Permission...

CVE-2020-8114

Removed by vendor...

CVE-2019-15583

An information disclosure exists in 12.3.2, 12.2.6, and 12.1.12 for GitLab Community Edition CE and Enterprise Edition EE. When an issue was moved to a public project from a private one, the associated private labels and the private project namespace would be disclosed through the GitLab API...

CVE-2019-15586

A XSS exists in Gitlab CE/EE 12.1.10 in the Mermaid plugin...

CVE-2019-5466

An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to disclose label names...

CVE-2019-15586

A XSS exists in Gitlab CE/EE 12.1.10 in the Mermaid plugin...

CVE-2019-15578

An information disclosure exists in 12.3.2, 12.2.6, and 12.1.12 for GitLab Community Edition CE and Enterprise Edition EE. The path of a private project, that used to be public, would be disclosed in the unsubscribe email link of issues and merge requests...

CVE-2019-5466

Technical details about CVE-2019-5466 are not publicly provided in the connected documents. Monitor for updates from vendors (GitLab, Red Hat, Ubuntu, Debian, CVE List) for affected versions, impact, and remediation.

CVE-2019-15582

An IDOR was discovered in 12.3.2, 12.2.6, and 12.1.12 for GitLab Community Edition CE and Enterprise Edition EE that allowed a maintainer to add any private group to a protected environment...

CVE-2019-5474

CVE-2019-5474 concerns GitLab EE: an authorization flaw in versions earlier than 12.1.2, 12.0.4, and 11.11.6 allows merge request approval rules to be overridden without proper permissions. The connected records consistently describe the issue as an authorization problem affecting the merge reque...

CVE-2019-5474

Removed by vendor...

CVE-2019-5465

CVE-2019-5465 affects GitLab CE/EE 8.14 and later. The issue is an information disclosure in the move issue feature that could disclose the newly created issue ID. The Connected documents confirm the vulnerability description across multiple sources, but do not provide concrete remediation detail...

CVE-2019-15583

CVE-2019-15583 affects GitLab Community Edition (CE) and Enterprise Edition (EE) through versions earlier than 12.3.2, 12.2.6, and 12.1.12, where moving an issue from a private project to a public project discloses private labels and the private project namespace via the GitLab API. The underlyin...