CVE-2019-19262

GitLab Enterprise Edition EE 11.9 and later through 12.5 has Insecure Permissions...

CVE-2019-19309

GitLab Enterprise Edition EE 8.90 and later through 12.5 has Incorrect Access Control...

UBUNTU-CVE-2019-19260

GitLab Community Edition CE and Enterprise Edition EE through 12.5 has Incorrect Access Control issue 2 of 2...

Server side request forgery (ssrf)

GitLab Enterprise Edition EE 6.7 and later through 12.5 allows SSRF...

CVE-2019-19087

Gitlab Enterprise Edition EE before 12.5.1 has Insecure Permissions issue 2 of 2...

CVE-2019-19086

Gitlab Enterprise Edition EE before 12.5.1 has Insecure Permissions issue 1 of 2...

CVE-2019-19088

Gitlab Enterprise Edition EE 11.3 through 12.4.2 allows Directory Traversal...

Directory traversal

Gitlab Enterprise Edition EE 11.3 through 12.4.2 allows Directory Traversal...

Code injection

Gitlab Enterprise Edition EE before 12.5.1 has Insecure Permissions issue 2 of 2...

Code injection

Gitlab Enterprise Edition EE before 12.5.1 has Insecure Permissions issue 1 of 2...

CVE-2019-19086

Gitlab Enterprise Edition EE before 12.5.1 has Insecure Permissions issue 1 of 2...

CVE-2019-19087

Removed by vendor...

CVE-2019-19086

Removed by vendor...

GitLab CE/EE Cross-Site Scripting Vulnerability (CNVD-2020-03774)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A cross-site scripting vulnerability exists in GitLab...

GitLab EE Cross-Site Scripting Vulnerability (CNVD-2020-03767)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A cross-site scripting vulnerability exists in GitLab...

GitLab CE/EE Access Control Error Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Community and...

CVE-2018-20491

An issue was discovered in GitLab Enterprise Edition 11.3.x and 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS...

CVE-2018-20498

An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control...

Gitlab Information Disclosure Vulnerability (CNVD-2020-12718)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in Gitlab...

GitLab EE Elevation of Privilege Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Enterprise...