CVE-2019-19262: Incorrect Permission Assignment for Critical Resource

GitLab Enterprise Edition EE 11.9 and later through 12.5 has Insecure Permissions...

CVE-2019-19087: Incorrect Permission Assignment for Critical Resource

Gitlab Enterprise Edition EE before 12.5.1 has Insecure Permissions issue 2 of 2...

CVE-2019-19259: Authorization Bypass Through User-Controlled Key

GitLab Enterprise Edition EE 11.3 and later through 12.5 allows an Insecure Direct Object Reference IDOR...

CVE-2019-19261: Server-Side Request Forgery (SSRF)

GitLab Enterprise Edition EE 6.7 and later through 12.5 allows SSRF...

CVE-2019-19256: Exposure of Sensitive Information to an Unauthorized Actor

GitLab Enterprise Edition EE 12.2 and later through 12.5 has Incorrect Access Control...

PT-2020-10107

Name of the Vulnerable Software and Affected Versions GitLab Enterprise Edition EE versions 12.3 through 12.5 Description The issue is related to incorrect access control. Recommendations For GitLab Enterprise Edition EE versions 12.3 through 12.5, update to a version that contains a fix for this...

PT-2020-10039

Name of the Vulnerable Software and Affected Versions Gitlab Enterprise Edition EE versions prior to 12.5.1 Description The issue concerns insecure permissions in Gitlab Enterprise Edition. Recommendations For versions prior to 12.5.1, update to version 12.5.1 or later to resolve the issue...

CVE-2019-19086: Incorrect Permission Assignment for Critical Resource

Gitlab Enterprise Edition EE before 12.5.1 has Insecure Permissions issue 1 of 2...

GitLab CE/EE Cross-Site Scripting Vulnerability (CNVD-2020-03774)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A cross-site scripting vulnerability exists in GitLab...

GitLab EE Cross-Site Scripting Vulnerability (CNVD-2020-03767)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A cross-site scripting vulnerability exists in GitLab...

GitLab CE/EE Access Control Error Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Community and...

CVE-2018-20498

An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control...

CVE-2018-20491

An issue was discovered in GitLab Enterprise Edition 11.3.x and 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS...

CVE-2018-20497

An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows SSRF...

CVE-2018-20499

An issue was discovered in GitLab Community and Enterprise Edition before 11.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows SSRF...

CVE-2018-20494

An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control...

CVE-2018-20491

An issue was discovered in GitLab Enterprise Edition 11.3.x and 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS...

CVE-2018-20489

An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control...

CVE-2018-20488

An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows Information Exposure...

CVE-2018-20507: Missing Authentication for Critical Function

An issue was discovered in GitLab Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control...