GitLab 缓冲区错误漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A buffer error vulnerability exists in GitLab CE/EE that allows an attacker to...

GitLab Community Edition和GitLab Enterprise Edition 信息泄露漏洞

GitLab Enterprise Edition is a content management system.GitLab Community Edition is a community edition of GitLab by GitLab, Inc. An information disclosure vulnerability exists in GitLab Community Edition CE and Enterprise Edition EE due to a lack of filtering in error messages. When the include...

PT-2022-2064 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 14.7 prior to 14.7.7 GitLab CE/EE versions 14.8 prior to 14.8.5 GitLab CE/EE versions 14.9 prior to 14.9.2 Description: A hardcoded password was set for accounts registered using an OmniAuth provider e.g. OAuth, LDAP, SA...

GitLab Community Edition和GitLab Enterprise Edition 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Community Edition CE and Enterprise Edition ...

GitLab Community Edition和GitLab Enterprise Edition 授权问题漏洞

GitLab Enterprise Edition is a content management system.GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An authorization issue vulnerability exists in GitLab Community Edition CE and Enterprise Edition EE, which is vulnerable due to incorrect authorization in GitLab...

GitLab Community Edition和GitLab Enterprise Edition 资源管理错误漏洞

GitLab Enterprise Edition is a content management system GitLab Community Edition is a community edition of GitLab from GitLab, Inc. A resource management error vulnerability exists in GitLab Community Edition CE and Enterprise Edition EE due to insufficient validation of user-supplied input in...

GitLab Enterprise Edition和GitLab Community Edition 信息泄露漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An information disclosure vulnerability exists in GitLab Enterprise Edition and GitLab Community Edition, which stems from the application outputting too much...

PT-2022-13134 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.4 through 14.7.1 Description: The issue is related to improper access control, allowing project non-members to retrieve the service desk email address. Recommendations: For GitLab CE/EE versions 12.4 through 14.7.1,...

PT-2022-13149 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: Gitlab CE/EE versions 12.7 through 14.5.4 Gitlab CE/EE versions 14.6 through 14.6.4 Gitlab CE/EE versions 14.7 through 14.7.1 Description: The issue is related to improper access control, allowing project non-members to retrieve issue details...

GitLab Community Edition和GitLab Enterprise Edition输入验证错误漏洞

GitLab Enterprise Edition is a content management system.GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An input validation error vulnerability exists in GitLab Community Edition CE and Enterprise Edition EE due to insufficient validation of user-supplied input in the...

GitLab Community Edition 和 Enterprise Edition 日志信息泄露漏洞

GitLab Enterprise Edition is a content management system.GitLab Community Edition is a community edition of GitLab from GitLab, Inc. A log message disclosure vulnerability exists in GitLab Community Edition CE and Enterprise Edition EE due to a lack of cleanup of logged exception messages. A remo...

Vulnerabilities fixed in GitLab

Vulnerabilities have been fixed in GitLab Community Edition CE and Enterprise Edition EE. The vulnerabilities allow a malicious party to conduct attacks that result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Bypassing authentication Accessing sensitive...

GitLab Community Edition和GitLab Enterprise Edition 信任管理问题漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. A trust management issue vulnerability exists in GitLab Community Edition CE and Enterprise Edition EE due to the presence of hard-coded credentials in...

PT-2022-2257 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 14.4 through 14.7.6 GitLab CE/EE versions 14.8 through 14.8.4 GitLab CE/EE versions 14.9 through 14.9.1 Description: The issue is related to the lack of protection of the web page structure, allowing for remote attackers...

UBUNTU-CVE-2022-0371

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 before 14.5.4, all versions starting from 14.6 before 14.6.4, all versions starting from 14.7 before 14.7.1. GitLab search may allow authenticated users to search other users by their respective private emails...

PT-2022-13253 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 14.3.6 GitLab CE/EE versions 14.4.0 through 14.4.3 GitLab CE/EE versions 14.5.0 through 14.5.1 Description: An issue has been discovered in GitLab CE/EE that allows unprivileged users to add other users to group...

PT-2022-13132 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 11.4 through 14.5.3 GitLab CE/EE versions 14.6 through 14.6.3 GitLab CE/EE versions 14.7 through 14.7.0 Description: An issue has been discovered in GitLab CE/EE where the search function may allow authenticated users to...

PT-2022-13176 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 14.5 and later Description: The issue is related to missing sanitization of HTML attributes in Jupyter notebooks, allowing an attacker to perform arbitrary HTTP POST requests on a user's behalf, potentially leading to...

PT-2022-13411 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE affected versions not specified Description: The issue concerns the inaccurate display of Snippet files containing special characters, which allows an attacker to create Snippets with misleading content. This misleading content...

GitLab Enterprise Edition 和 GitLab Community Edition 信息泄露漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An information disclosure vulnerability exists in GitLab Enterprise Edition and GitLab Community Edition that could allow a remote administrator to gain...