CVE-2018-19576

Removed by vendor...

CVE-2018-19570

GitLab CE/EE, versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via unrecognized HTML tags...

CVE-2018-19570

GitLab CE/EE, versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via unrecognized HTML tags...

CVE-2018-19570

CVE-2018-19570 affects GitLab CE/EE: GitLab versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1 are vulnerable to an XSS in Markdown fields caused by unrecognized HTML tags. The issue is documented across multiple sources (NVD, OSV, CNVD, CVE listings, and vendor advisories)....

CVE-2018-19570

Removed by vendor...

CVE-2018-19577

Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an incorrect access control vulnerability that displays to an unauthorized user the title and namespace of a confidential issue...

CVE-2018-19573

GitLab CE/EE, versions 10.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via Mermaid...

CVE-2018-19573

GitLab CE/EE (versions 10.3 through 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1) are affected by an XSS in Markdown fields via Mermaid. Root cause: unsafe rendering of Mermaid content in Markdown. Impact is XSS in affected Markdown fields; no exploit status provided in the doc...

CVE-2018-19573

Removed by vendor...

CVE-2018-19577

Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an incorrect access control vulnerability that displays to an unauthorized user the title and namespace of a confidential issue...

CVE-2018-19577

GitLab CE/EE (versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1) is affected by an incorrect access control vulnerability that allows an unauthorized user to see the title and namespace of a confidential issue. Root cause: improper access control in issue metadata...

PT-2019-9866 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 8.0 up to 11.3.10 GitLab CE/EE versions 11.4 up to 11.4.7 GitLab CE/EE versions 11.5 up to 11.5.0 Description: The issue allows administrators with access to the logs to see another user's token, as access tokens are...

CVE-2018-19584: Authorization Bypass Through User-Controlled Key

GitLab EE, versions 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure direct object reference vulnerability that allows authenticated, but unauthorized, users to view members and milestone details of private groups...

CVE-2018-19573: Improper Neutralization of Input During Web Page Generation

GitLab CE/EE, versions 10.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via Mermaid...

CVE-2018-19581: Improper Authorization

GitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure object reference vulnerability that allows a Guest user to set the weight of an issue they create...

PT-2019-9864

Name of the Vulnerable Software and Affected Versions GitLab EE versions 8.3 up to 11.x before 11.3.11 GitLab EE version 11.4 before 11.4.8 GitLab EE version 11.5 before 11.5.1 Description The issue is related to an insecure object reference vulnerability. This vulnerability allows a Guest user t...

PT-2019-9862

Name of the Vulnerable Software and Affected Versions GitLab EE version 11.5 Description The issue is related to a persistent XSS vulnerability in the Operations page. Recommendations For GitLab EE version 11.5, update to version 11.5.1 to resolve the issue...

CVE-2018-19571: Server-Side Request Forgery (SSRF)

GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an SSRF vulnerability in webhooks...

PT-2019-9858

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 10.1 through 11.5 Description The issue allows a user to make comments on a locked issue due to an insecure direct object reference. Recommendations For versions 10.1 through 11.3.10, update to version 11.3.11 or later. F...

PT-2019-9852

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 8.8 up to 11.3.10 GitLab CE/EE version 11.4 up to 11.4.7 GitLab CE/EE version 11.5 up to 11.5.0 Description The issue allows access to the web-UI as a user using a Personal Access Token of any scope, due to an authorizati...