CVE-2019-15590: Improper Access Control

An access control issue exists in 12.3.5, 12.2.8, and 12.1.14 for GitLab Community Edition CE and Enterprise Edition EE where private merge requests and issues would be disclosed with the Group Search feature provided by Elasticsearch integration...

PT-2020-9716

Name of the Vulnerable Software and Affected Versions GitLab Community Edition CE and Enterprise Edition EE versions prior to 12.3.2 GitLab Community Edition CE and Enterprise Edition EE versions prior to 12.2.6 GitLab Community Edition CE and Enterprise Edition EE versions prior to 12.1.12...

PT-2020-9721

Name of the Vulnerable Software and Affected Versions GitLab Community Edition CE and Enterprise Edition EE versions prior to 12.3.5 GitLab Community Edition CE and Enterprise Edition EE versions prior to 12.2.8 GitLab Community Edition CE and Enterprise Edition EE versions prior to 12.1.14...

CVE-2019-15585: Improper Authentication

Improper authentication exists in 12.3.2, 12.2.6, and 12.1.12 for GitLab Community Edition CE and Enterprise Edition EE in the GitLab SAML integration had a validation issue that permitted an attacker to takeover another user's account...

CVE-2019-15578: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure exists in 12.3.2, 12.2.6, and 12.1.12 for GitLab Community Edition CE and Enterprise Edition EE. The path of a private project, that used to be public, would be disclosed in the unsubscribe email link of issues and merge requests...

CVE-2020-6832

An issue was discovered in GitLab Enterprise Edition EE 8.9.0 through 12.6.1. Using the project import feature, it was possible for someone to obtain issues from private projects...

CVE-2020-6832

An issue was discovered in GitLab Enterprise Edition EE 8.9.0 through 12.6.1. Using the project import feature, it was possible for someone to obtain issues from private projects...

CVE-2019-20142

An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE 12.3 through 12.6.1. It allows Denial of Service...

CVE-2019-20143

An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE 12.6. It has Incorrect Access Control...

CVE-2019-20144

An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE 10.8 through 12.6.1. It has Incorrect Access Control...

CVE-2019-20145

An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE 11.4 through 12.6.1. It has Incorrect Access Control...

CVE-2019-20146

An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE 11.0 through 12.6. It allows Uncontrolled Resource Consumption...

CVE-2019-20147

An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE 9.1 through 12.6.1. It has Incorrect Access Control...

CVE-2019-20148

An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE 8.13 through 12.6.1. It has Incorrect Access Control...

CVE-2020-5197

An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE 5.1 through 12.6.1. It has Incorrect Access Control...

CVE-2020-6832

An issue was discovered in GitLab Enterprise Edition EE 8.9.0 through 12.6.1. Using the project import feature, it was possible for someone to obtain issues from private projects...

PT-2020-19251 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab Enterprise Edition versions 8.9.0 through 12.6.1 Description: An issue was discovered that allows someone to obtain issues from private projects using the project import feature. Recommendations: For GitLab Enterprise Edition versions...

PT-2020-10345

Name of the Vulnerable Software and Affected Versions GitLab Community Edition CE and Enterprise Edition EE version 12.6 Description An issue was discovered in GitLab, related to Incorrect Access Control. Recommendations For GitLab Community Edition CE and Enterprise Edition EE version 12.6, at t...

CVE-2020-5197: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE 5.1 through 12.6.1. It has Incorrect Access Control...

PT-2020-10347

Name of the Vulnerable Software and Affected Versions GitLab Community Edition CE and Enterprise Edition EE versions 11.4 through 12.6.1 Description The issue is related to Incorrect Access Control. There is no information provided about the estimated number of potentially affected devices...