CVE-2017-0918

Removed by vendor...

CVE-2017-0917

Removed by vendor...

CVE-2017-0927

Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users...

CVE-2017-0915

Gitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the GitlabProjectsImportService resulting in remote code execution...

CVE-2017-0923: Improper Neutralization of Input During Web Page Generation

Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site scripting...

PT-2018-5151

Name of the Vulnerable Software and Affected Versions Gitlab Community Edition version 10.2.4 Description The issue is related to a lack of input validation in the labels component, resulting in persistent cross-site scripting. Recommendations For Gitlab Community Edition version 10.2.4, update t...

CVE-2017-0924: Improper Neutralization of Input During Web Page Generation

Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scripting...

CVE-2017-0915: Improper Neutralization of Special Elements used in a Command

Gitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the GitlabProjectsImportService resulting in remote code execution...

PT-2018-5154

Name of the Vulnerable Software and Affected Versions Gitlab Community Edition version 10.3 Description The issue is related to an improper authorization problem in the deployment keys component. This results in unauthorized use of deployment keys by guest users. Recommendations For Gitlab...

CVE-2017-0927: Improper Authorization

Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users...

PT-2018-5150

Name of the Vulnerable Software and Affected Versions Gitlab Community Edition version 9.1 Description The issue is related to a lack of input validation in the IPython notebooks component, resulting in persistent cross-site scripting. Recommendations For Gitlab Community Edition version 9.1,...

CVE-2017-0926: Improper Authorization

Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component resulting in unauthorized user login...

CVE-2018-3710: Insecure Temporary File

Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execution...

CVE-2017-0918: Relative Path Traversal

Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution...

CVE-2017-0914: Improper Neutralization of Special Elements used in an SQL Command

Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a GitLab instance's database...

CVE-2017-0916: Improper Neutralization of Special Elements used in a Command

Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the systemhookpush queue through web hook component resulting in remote code execution...

CVE-2017-0917: Improper Neutralization of Input During Web Page Generation

Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in persistent cross site scripting...

PT-2018-5144

Name of the Vulnerable Software and Affected Versions Gitlab Community Edition version 10.2.4 Description The issue is related to a lack of input validation in the CI job component, resulting in persistent cross-site scripting. This allows for malicious scripts to be injected and executed,...

PT-2018-5142

Name of the Vulnerable Software and Affected Versions Gitlab Community Edition version 10.2.4 Description The issue is related to a lack of input validation in the GitlabProjectsImportService that results in remote code execution. Recommendations For Gitlab Community Edition version 10.2.4,...

PT-2018-5153

Name of the Vulnerable Software and Affected Versions Gitlab Community Edition version 10.3 Description The issue is related to an improper authorization problem in the Oauth sign-in component, which can result in unauthorized user login. This allows unauthorized access to the system...