PT-2022-13411 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE affected versions not specified Description: The issue concerns the inaccurate display of Snippet files containing special characters, which allows an attacker to create Snippets with misleading content. This misleading content...

GitLab Enterprise Edition 和 GitLab Community Edition 信息泄露漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An information disclosure vulnerability exists in GitLab Enterprise Edition and GitLab Community Edition that could allow a remote administrator to gain...

GitLab Enterprise Edition和GitLab Community Edition 授权问题漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. GitLab Enterprise Edition and GitLab Community Edition have an authorization issue vulnerability that arises from an application exporting too much data in the...

GitLab Enterprise Edition 和 GitLab Community Edition 访问控制错误漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An Access Control Error vulnerability exists in GitLab Enterprise Edition and GitLab Community Edition that stems from inaccurately displaying Snippet files th...

GitLab Enterprise Edition和GitLab Community Edition 资源管理错误漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. A resource management error vulnerability exists in GitLab Enterprise Edition and GitLab Community Edition, which arises from user-supplied input in user...

GitLab Enterprise Edition 和 GitLab Community Edition 访问控制错误漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An access control error vulnerability exists in GitLab Enterprise Edition and GitLab Community Edition, which stems from improperly restricted access. A remote...

PT-2022-2255

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 12.10 through 14.6.4 GitLab CE/EE versions 14.7 through 14.7.3 GitLab CE/EE versions 14.8 through 14.8.1 Description An issue has been discovered in GitLab CE/EE, allowing an unauthorized user to steal runner registration...

GitLab Enterprise Edition 访问控制错误漏洞

GitLab Enterprise Edition is a content management system. An Access Control Error vulnerability exists in GitLab Enterprise Edition and Gitlab Community Edition that stems from improperly restricted access. When a remote authenticated attacker is linked to an item in the vulnerability indicator...

GitLab Enterprise Edition 代码问题漏洞

GitLab Enterprise Edition is a content management system. A code issue vulnerability exists in GitLab Enterprise Edition and Gitlab Community Edition that stems from a DNS rebinding issue in the Irker IRC Gateway integration. A remote attacker could use this vulnerability to send a specially...

GitLab Enterprise Edition 安全漏洞

GitLab Enterprise Edition EE is a content management system from the US-based GitLab, Inc. A security vulnerability exists in GitLab Enterprise Edition and Gitlab Community Edition that stems from improperly restricted access. A remotely authenticated attacker could use this vulnerability to obta...

GitLab Enterprise Edition 和 Community Edition 输入验证错误漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An input validation error vulnerability exists in GitLab Enterprise Edition and Gitlab Community Edition due to improper filtering of user-supplied data in Jir...

GitLab Enterprise Edition 和 Gitlab Community Edition 代码问题漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. A code issue vulnerability exists in GitLab Enterprise Edition and Gitlab Community Edition that stems from the software not adequately validating user-supplie...

GitLab Enterprise Edition 和 Community Edition 信息泄露漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An information disclosure vulnerability exists in GitLab Enterprise Edition and Gitlab Community Edition, which is caused by the application exporting too much...

GitLab Enterprise Edition和GitLab Community Edition 输入验证错误漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An input validation error vulnerability exists in GitLab Enterprise Edition and Gitlab Community Edition that stems from improper handling of bulk requests to...

UBUNTU-CVE-2021-39892

In all versions of GitLab CE/EE since version 12.0, a lower privileged user can import users from projects that they don't have a maintainer role on and disclose email addresses of those users...

UBUNTU-CVE-2021-39946

Improper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed an attacker to exploit XSS by abusing the generation of the HTML code related to emojis...

PT-2022-11087 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.0 and later Description: The issue allows a lower privileged user to import users from projects they do not have a maintainer role on, potentially disclosing email addresses of those users. Recommendations: For GitLab...

PT-2022-11089 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 8.4 through 14.4.4 GitLab CE/EE versions 14.5.0 through 14.5.2 GitLab CE/EE versions 14.6.0 through 14.6.1 Description: The issue concerns a server-side request forgery protection failure in GitLab CE/EE. This failure...

PT-2022-11090 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.0 through 14.3.5 GitLab CE/EE versions 14.4 through 14.4.3 GitLab CE/EE versions 14.5 through 14.5.1 Description: A denial of service issue allows low-privileged users to bypass file size limits in the NPM package...

PT-2022-13008 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.3 and later Description: An issue has been discovered in GitLab CE/EE, where under certain conditions, it was possible to bypass the IP restriction for public projects through GraphQL. This allowed unauthorized users ...