4841 matches found
CVE-2020-7979
CVE-2020-7979 affects GitLab EE versions 8.9 through 12.7.2 with an Insecure Permission issue. The connected OSV/NVD entries corroborate this vulnerability family but do not provide exploit details, specific root cause, or a published mitigation within the supplied documents. Affected software is...
CVE-2020-8114
Removed by vendor...
CVE-2020-8114
GitLab EE 8.9 and later through 12.7.2 has Insecure Permission...
CVE-2020-8114
CVE-2020-8114 affects GitLab EE 8.9 through 12.7.2 with an insecure permission issue (privilege-related). The vulnerability is described consistently across multiple sources (OSV, CNVD, NVD, CNVD clones). Impact is marked high (CP/I/H/A), but exploitation details are not provided in the documents...
CVE-2020-7977: Incorrect Default Permissions
GitLab EE 8.8 and later through 12.7.2 has Insecure Permissions...
CVE-2020-7968: Missing Authorization
GitLab EE 8.0 through 12.7.2 has Incorrect Access Control...
CVE-2020-8114: Incorrect Default Permissions
GitLab EE 8.9 and later through 12.7.2 has Insecure Permission...
CVE-2020-7978: Undefined Security Weakness
GitLab EE 12.6 and later through 12.7.2 allows Denial of Service...
CVE-2020-6833: Undefined Security Weakness
An issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to package and file disclosure via request smuggling...
CVE-2020-7971: Improper Neutralization of Input During Web Page Generation
GitLab EE 11.0 and later through 12.7.2 allows XSS...
CVE-2020-7969: Undefined Security Weakness
GitLab EE 8.0 and later through 12.7.2 allows Information Disclosure...
CVE-2020-7967: Incorrect Default Permissions
GitLab EE 8.0 through 12.7.2 has Insecure Permissions issue 1 of 2...
CVE-2020-7974: Undefined Security Weakness
GitLab EE 10.1 through 12.7.2 allows Information Disclosure...
CVE-2020-7972: Incorrect Default Permissions
GitLab EE 12.2 has Insecure Permissions issue 2 of 2...
CVE-2020-7979: Incorrect Default Permissions
GitLab EE 8.9 and later through 12.7.2 has Insecure Permission...
CVE-2020-7966: Improper Limitation of a Pathname to a Restricted Directory
GitLab EE 11.11 and later through 12.7.2 allows Directory Traversal...
CVE-2020-7976: Undefined Security Weakness
GitLab EE 12.4 and later through 12.7.2 has Incorrect Access Control...
CVE-2019-15583
An information disclosure exists in 12.3.2, 12.2.6, and 12.1.12 for GitLab Community Edition CE and Enterprise Edition EE. When an issue was moved to a public project from a private one, the associated private labels and the private project namespace would be disclosed through the GitLab API...
