1180 matches found
PT-2018-11286
Name of the Vulnerable Software and Affected Versions GitLab Community Edition and Enterprise Edition versions 10.7.x through 10.7.5 Description An issue was discovered due to the usage of url for which contained a XSS issue. This was caused by url for allowing arbitrary protocols as a parameter...
GitLab Community Edition and Enterprise Edition HTML Injection Vulnerability
GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository, which has similar functionality to Github for accessing the contents of a project's files, commit history, bug lists, and more. An HTML injection...
CVE-2018-10379
Removed by vendor...
PT-2018-9860
Name of the Vulnerable Software and Affected Versions: GitLab Community Edition CE versions 10.5.x through 10.5.7 GitLab Community Edition CE versions 10.6.x through 10.6.4 GitLab Community Edition CE versions 10.7.x through 10.7.1 GitLab Enterprise Edition EE versions 10.5.x through 10.5.7 GitLa...
CVE-2018-10379: Improper Neutralization of Input During Web Page Generation
An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE before 10.5.8, 10.6.x before 10.6.5, and 10.7.x before 10.7.2. The Move Issue feature contained a persistent XSS vulnerability...
GitLab Community Edition (CE) and Enterprise Edition License Bypass Vulnerability
GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository, which has features similar to Github, with access to a project's file contents, commit history, bug list, etc. GitLab Community Edition CE is the...
Gitlab deployment keys component improper authorization vulnerability
GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository , which has features similar to Github , you can check out the project's file content , commit history , bug lists , etc. GitLab Community Edition CE ...
Gitlab GitLab CI runner component path traversal vulnerability
GitLab is a set of Ruby on Rails development of open source applications , can be realized as a self-hosted Git version control system project repository , which has similar features to Github , you can access the project's file content , commit history , bug lists , etc. GitLab Community Edition...
Gitlab SQL Injection Vulnerability
GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository, which has features similar to those of Github, such as access to a project's file contents, commit history, bug lists, etc. GitLab Community Edition ...
Gitlab IPython notebooks component cross-site scripting vulnerability
GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository , which has similar features to Github , you can access the project's file content , commit history , bug lists , etc. GitLab Community Edition CE is...
Gitlab cross-site scripting vulnerability (CNVD-2018-06861)
GitLab is a set of Ruby on Rails development of open source applications , can be realized as a self-hosted Git version control system project repository , which has similar features to Github , you can check the project's file content , commit history , bug lists , etc. GitLab Community Edition ...
UBUNTU-CVE-2017-0918
Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution...
Authorization
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component resulting in unauthorized user login...
CVE-2017-0915
Gitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the GitlabProjectsImportService resulting in remote code execution...
CVE-2017-0926
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component resulting in unauthorized user login...
CVE-2017-0927
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users...
Authorization
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users...
CVE-2017-0927
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users...