PT-2020-9364

Name of the Vulnerable Software and Affected Versions: GitLab Enterprise Edition versions 8.3 through 12.0.2 Description: An issue was discovered in the color codes decoder, which was vulnerable to a resource depletion attack if specific formats were used, allowing Uncontrolled Resource...

PT-2020-9372

Name of the Vulnerable Software and Affected Versions: GitLab Enterprise Edition versions 10.6 through 12.0.2 Description: The GitHub project integration in GitLab Enterprise Edition is affected by an SSRF vulnerability, allowing an attacker to make requests to local network resources due to...

PT-2020-9325

Name of the Vulnerable Software and Affected Versions: GitLab Community and Enterprise Edition versions 8.9 through 11.11 Description: The issue is related to a lack of input validation in Wiki Pages, resulting in a persistent XSS vulnerability. Recommendations: For GitLab Community and Enterpris...

CVE-2019-13011: Uncontrolled Resource Consumption

An issue was discovered in GitLab Enterprise Edition 8.11.0 through 12.0.2. By using brute-force a user with access to a project, but not it's repository could create a list of merge requests template names. It has excessive algorithmic complexity...

PT-2020-9365

Name of the Vulnerable Software and Affected Versions: GitLab Enterprise Edition versions 8.11.0 through 12.0.2 Description: An issue was discovered that allows a user with access to a project, but not its repository, to create a list of merge requests template names using brute-force. The issue...

GitLab EE elevation of privilege vulnerability (CNVD-2020-13199)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. An elevation of privilege vulnerability exists in GitLab EE...

CVE-2020-8795

In GitLab Enterprise Edition EE 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users...

CVE-2020-8795

In GitLab Enterprise Edition EE 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users...

CVE-2020-8795

In GitLab Enterprise Edition EE 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users...

CVE-2019-12825

Unauthorized Access to the Container Registry of other groups was discovered in GitLab Enterprise 12.0.0-pre. In other words, authenticated remote attackers can read Docker registries of other groups. When a legitimate user changes the path of a group, Docker registries are not adapted, leaving...

CVE-2019-12825

Unauthorized Access to the Container Registry of other groups was discovered in GitLab Enterprise 12.0.0-pre. In other words, authenticated remote attackers can read Docker registries of other groups. When a legitimate user changes the path of a group, Docker registries are not adapted, leaving...

Path traversal

Unauthorized Access to the Container Registry of other groups was discovered in GitLab Enterprise 12.0.0-pre. In other words, authenticated remote attackers can read Docker registries of other groups. When a legitimate user changes the path of a group, Docker registries are not adapted, leaving...

CVE-2019-12825

CVE-2019-12825 affects GitLab Enterprise 12.0.0-pre: authenticated remote attackers can read Docker registries of other groups due to a namespace not adapting when a group path changes, leaving registries unprotected and accessible. This describes an unauthorized access vulnerability in the conta...

CVE-2019-12825

Removed by vendor...

PT-2020-20284 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab Enterprise Edition EE versions 12.5.0 through 12.7.5 Description: The issue allows project access to unauthorized users when a group is shared with another group. Recommendations: For GitLab Enterprise Edition EE versions 12.5.0 throug...

PT-2020-9344

Name of the Vulnerable Software and Affected Versions: GitLab Enterprise version 12.0.0-pre Description: The issue allows authenticated remote attackers to read Docker registries of other groups. This occurs when a legitimate user changes the path of a group, and the Docker registries are not...

CVE-2020-8795: Undefined Security Weakness

In GitLab Enterprise Edition EE 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users...

CVE-2019-12825: Insecure Storage of Sensitive Information

Unauthorized Access to the Container Registry of other groups was discovered in GitLab Enterprise 12.0.0-pre. In other words, authenticated remote attackers can read Docker registries of other groups. When a legitimate user changes the path of a group, Docker registries are not adapted, leaving...

GitLab EE Denial of Service Vulnerability

GitLab is a Ruby on Rails developed, self-hosted, Git version control system project repository application from GitLab, Inc. The program can be used to access the project's file contents, commit history, bug list , etc. Git is a free, open source distributed version control system. A security...

GitLab EE Insecure Privilege Vulnerability (CNVD-2020-14343)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE 8.0 - 12.7.2 suffers from an insecure privilege...