CVE-2018-18642

An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has XSS...

CVE-2018-18645

An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It allows for Information Exposure via unsubscribe links in email replies...

CVE-2018-18646

An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It allows SSRF...

CVE-2018-17976

CVE-2018-17976 affects GitLab Community Edition 11.x (before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2). The vulnerability enables information exposure through Epic change descriptions in the Epic feature. Affected versions expose partial to high-privacy data (as per the CVE and rela...

CVE-2018-18647

An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Missing Authorization...

CVE-2018-18648

An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Information Exposure Through an Error Message...

CVE-2018-18640

An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Information Exposure Through Browser Caching...

CVE-2018-17976: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure via Epic change descriptions...

PT-2018-14287

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 11.1.x through 11.1.7 GitLab Community and Enterprise Edition versions 11.2.x through 11.2.4 GitLab Community and Enterprise Edition versions 11.3.x through 11.3.1 Description An issue was...

CVE-2018-17975: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure via the GFM markdown API...

PT-2018-14309

Name of the Vulnerable Software and Affected Versions GitLab Community Edition versions 11.0.0 through 11.1.8 GitLab Community Edition versions 11.2.0 through 11.2.5 GitLab Community Edition versions 11.3.0 through 11.3.2 Description An issue was discovered that leads to Information Exposure via...

PT-2018-14556

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions prior to 11.2.7 GitLab Community and Enterprise Edition versions 11.3.x prior to 11.3.8 GitLab Community and Enterprise Edition versions 11.4.x prior to 11.4.3 Description An issue was discovere...

PT-2018-14554

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 11.0.0 through 11.2.7 GitLab Community and Enterprise Edition versions 11.3.0 through 11.3.8 GitLab Community and Enterprise Edition versions 11.4.0 through 11.4.3 Description An issue in GitLab...

PT-2018-14555

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions prior to 11.2.7 GitLab Community and Enterprise Edition versions 11.3.x prior to 11.3.8 GitLab Community and Enterprise Edition versions 11.4.x prior to 11.4.3 Description The issue allows for...

PT-2018-14558

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions prior to 11.2.7 GitLab Community and Enterprise Edition versions 11.3.x prior to 11.3.8 GitLab Community and Enterprise Edition versions 11.4.x prior to 11.4.3 Description The issue concerns...

CVE-2018-18642: Improper Neutralization of Input During Web Page Generation

An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has XSS...

CVE-2018-18647: Missing Authorization

An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Missing Authorization...

CVE-2018-18646: Server-Side Request Forgery (SSRF)

An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It allows SSRF...

PT-2018-14310

Name of the Vulnerable Software and Affected Versions GitLab Community Edition versions 11.0.0 through 11.1.8 GitLab Community Edition versions 11.2.0 through 11.2.5 GitLab Community Edition versions 11.3.0 through 11.3.2 Description An issue was discovered that leads to Information Exposure via...

PT-2018-14551

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions prior to 11.2.7 GitLab Community and Enterprise Edition versions 11.3.x prior to 11.3.8 GitLab Community and Enterprise Edition versions 11.4.x prior to 11.4.3 Description The issue is related t...