PT-2019-10085

Name of the Vulnerable Software and Affected Versions: GitLab Community and Enterprise Edition versions prior to 11.4.13 GitLab Community and Enterprise Edition versions 11.5.x prior to 11.5.6 GitLab Community and Enterprise Edition versions 11.6.x prior to 11.6.1 Description: The issue is relate...

CVE-2018-20497: Server-Side Request Forgery (SSRF)

An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows SSRF...

PT-2019-10090

Name of the Vulnerable Software and Affected Versions: GitLab Community and Enterprise Edition versions prior to 11.4.13 GitLab Community and Enterprise Edition versions 11.5.x prior to 11.5.6 GitLab Community and Enterprise Edition versions 11.6.x prior to 11.6.1 Description: The issue is relate...

PT-2019-10084

Name of the Vulnerable Software and Affected Versions: GitLab Community and Enterprise Edition versions 11.4.x through 11.4.12 GitLab Community and Enterprise Edition versions 11.5.x through 11.5.5 GitLab Community and Enterprise Edition versions 11.6.x through 11.6.0 Description: The issue is...

UBUNTU-CVE-2019-18449

An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the autocomplete feature. It has Insecure Permissions issue 2 of 2...

CVE-2019-18446

An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.4. It has Insecure Permissions issue 1 of 2...

UBUNTU-CVE-2019-18448

An issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Incorrect Access Control...

UBUNTU-CVE-2019-18450

An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project labels feature. It has Insecure Permissions...

CVE-2019-18447

An issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Insecure Permissions...

CVE-2019-18448

An issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Incorrect Access Control...

CVE-2019-18449

An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the autocomplete feature. It has Insecure Permissions issue 2 of 2...

CVE-2019-18451

An issue was discovered in GitLab Community and Enterprise Edition 10.7.4 through 12.4 in the InternalRedirect filtering feature. It has an Open Redirect...

CVE-2019-18452

An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4 when moving an issue to a public project from a private one. It has Insecure Permissions...

CVE-2019-18455

Removed by vendor...

CVE-2019-18456

An issue was discovered in GitLab Community and Enterprise Edition 8.17 through 12.4 in the Search feature provided by Elasticsearch integration.. It has Insecure Permissions issue 1 of 4...

PT-2019-15407

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions prior to 12.4 Description An issue was discovered in the Project labels feature, which has Insecure Permissions. Recommendations For versions prior to 12.4, update to version 12.4 or later to...

CVE-2019-18459: Incorrect Permission Assignment for Critical Resource

An issue was discovered in GitLab Community and Enterprise Edition 11.3 to 12.3 in the protected environments feature. It has Insecure Permissions issue 3 of 4...

PT-2019-15411

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 10.5 through 12.4 Description An issue was discovered in the link validation for RDoc wiki pages feature, which has a cross-site scripting XSS issue. Recommendations For versions 10.5 through...

PT-2019-15405

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions prior to 12.4 Description An issue was discovered that involves Incorrect Access Control. Recommendations For versions prior to 12.4, update to version 12.4 or later to resolve the issue...

PT-2019-15412

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 11 through 12.4 Description An issue was discovered when building Nested GraphQL queries, which can cause a large or infinite loop. Recommendations For versions 11 through 12.4, consider...