Improper access control

GitLab Enterprise Edition EE 10.8 and later through 12.5 has Incorrect Access Control...

CVE-2019-19309

GitLab Enterprise Edition EE 8.90 and later through 12.5 has Incorrect Access Control...

CVE-2019-19262

GitLab Enterprise Edition EE 11.9 and later through 12.5 has Insecure Permissions...

Design/Logic Flaw

GitLab Enterprise Edition EE 11.9 and later through 12.5 has Insecure Permissions...

UBUNTU-CVE-2019-19260

GitLab Community Edition CE and Enterprise Edition EE through 12.5 has Incorrect Access Control issue 2 of 2...

Server side request forgery (ssrf)

GitLab Enterprise Edition EE 6.7 and later through 12.5 allows SSRF...

CVE-2019-19087

Gitlab Enterprise Edition EE before 12.5.1 has Insecure Permissions issue 2 of 2...

CVE-2019-19086

Gitlab Enterprise Edition EE before 12.5.1 has Insecure Permissions issue 1 of 2...

CVE-2019-19088

Gitlab Enterprise Edition EE 11.3 through 12.4.2 allows Directory Traversal...

Code injection

Gitlab Enterprise Edition EE before 12.5.1 has Insecure Permissions issue 2 of 2...

Directory traversal

Gitlab Enterprise Edition EE 11.3 through 12.4.2 allows Directory Traversal...

CVE-2019-19086

Gitlab Enterprise Edition EE before 12.5.1 has Insecure Permissions issue 1 of 2...

Code injection

Gitlab Enterprise Edition EE before 12.5.1 has Insecure Permissions issue 1 of 2...

CVE-2019-19087

Removed by vendor...

CVE-2019-19086

Removed by vendor...

GitLab EE Cross-Site Scripting Vulnerability (CNVD-2020-03767)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A cross-site scripting vulnerability exists in GitLab...

GitLab CE/EE Cross-Site Scripting Vulnerability (CNVD-2020-03774)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A cross-site scripting vulnerability exists in GitLab...

GitLab CE/EE Access Control Error Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Community and...

CVE-2018-20491

An issue was discovered in GitLab Enterprise Edition 11.3.x and 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS...

CVE-2018-20498

An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control...