PT-2020-13404 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 9.5 through 13.0.1 Description: An authorization issue was identified that could allow unauthorized users to impersonate a project maintainer, enabling them to perform limited actions. Recommendations: For GitLab EE version...

PT-2020-13414 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.0 through 13.0.1 Description: A Denial of Service issue allows system resources to be exhausted. Recommendations: For GitLab CE/EE versions 12.0 through 13.0.1, update to a version later than 13.0.1 to resolve the iss...

PT-2020-13418 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 10.6 through 13.0.5 Description: An authorization issue in the mirroring logic allowed read access to private repositories. Recommendations: For GitLab CE/EE versions 10.6 through 13.0.5, update to a version later than...

GitLab path traversal vulnerability (CNVD-2020-29843)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Enterprise...

PT-2020-13120 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 12.8 and later Description: The issue allows exposure of sensitive information to an unauthorized actor via NuGet. Recommendations: For GitLab EE versions 12.8 and later, at the moment, there is no information about a newer...

CVE-2020-11505

An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3. A Workhorse bypass could lead to NuGet package and file disclosure Exposure of Sensitive Information via request smuggling...

PT-2020-12652 · Microsoft +1 · Nuget +2

Name of the Vulnerable Software and Affected Versions: GitLab Community Edition CE versions 12.7.x through 12.7.8 GitLab Community Edition CE versions 12.8.x through 12.8.8 GitLab Community Edition CE versions 12.9.x through 12.9.2 GitLab Enterprise Edition EE versions 12.7.x through 12.7.8 GitLa...

Unspecified Vulnerability in GitLab EE/CE

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab EE/CE, no detai...

PT-2020-12461 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE/CE versions 8.17 to 12.9 Description: The issue concerns information leakage when querying a merge request widget. Recommendations: For GitLab EE/CE versions 8.17 to 12.9, update to a version that contains a fix for this issue to...

GitLab EE Path Traversal Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A path traversal vulnerability exists in the NPM feature ...

PT-2020-12445 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 11.7 through 12.9 Description: The NPM feature in GitLab EE is affected by a path traversal issue. Recommendations: For versions 11.7 through 12.9, update to a version that contains a fix for this issue to prevent path...

PT-2020-12444 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE/CE versions 8.11 through 12.9.1 Description: The issue allows blocked users to pull and push Docker images. This is a significant concern as it bypasses the intended access restrictions for blocked users. Recommendations: For GitLab...

GitLab Code Issue Vulnerability (CNVD-2020-19601)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A code issue vulnerability exists in GitLab Enterprise...

GitLab EE Denial of Service Vulnerability (CNVD-2020-17387)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Enterprise...

PT-2020-11898 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 12.4.2 through 12.8.1 Description: The issue involves a potential denial of service related to permissions checks, which could impact a project home page. Recommendations: For GitLab EE versions 12.4.2 through 12.8.1, updat...

PT-2020-11902 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 3.0 through 12.8.1 Description: The issue allows for Server Side Request Forgery SSRF, which was discovered through an internal investigation. This investigation found that a particular deprecated service was creating the...

CVE-2019-13121

An issue was discovered in GitLab Enterprise Edition 10.6 through 12.0.2. The GitHub project integration was vulnerable to an SSRF vulnerability which allowed an attacker to make requests to local network resources. It has Incorrect Access Control...

UBUNTU-CVE-2019-13010

An issue was discovered in GitLab Enterprise Edition 8.3 through 12.0.2. The color codes decoder was vulnerable to a resource depletion attack if specific formats were used. It allows Uncontrolled Resource Consumption...

CVE-2019-13011

An issue was discovered in GitLab Enterprise Edition 8.11.0 through 12.0.2. By using brute-force a user with access to a project, but not it's repository could create a list of merge requests template names. It has excessive algorithmic complexity...

CVE-2019-13003

An issue was discovered in GitLab Community and Enterprise Edition before 12.0.3. One of the parsers used by Gilab CI was vulnerable to a resource exhaustion attack. It allows Uncontrolled Resource Consumption...