2096 matches found
CVE-2019-19087: Incorrect Permission Assignment for Critical Resource
Gitlab Enterprise Edition EE before 12.5.1 has Insecure Permissions issue 2 of 2...
CVE-2019-19309: Undefined Security Weakness
GitLab Enterprise Edition EE 8.90 and later through 12.5 has Incorrect Access Control...
CVE-2019-19086: Incorrect Permission Assignment for Critical Resource
Gitlab Enterprise Edition EE before 12.5.1 has Insecure Permissions issue 1 of 2...
CVE-2019-19259: Authorization Bypass Through User-Controlled Key
GitLab Enterprise Edition EE 11.3 and later through 12.5 allows an Insecure Direct Object Reference IDOR...
CVE-2019-19254: Exposure of Sensitive Information to an Unauthorized Actor
GitLab Community Edition CE and Enterprise Edition EE. 9.6 and later through 12.5 has Incorrect Access Control...
CVE-2019-19261: Server-Side Request Forgery (SSRF)
GitLab Enterprise Edition EE 6.7 and later through 12.5 allows SSRF...
CVE-2019-19256: Exposure of Sensitive Information to an Unauthorized Actor
GitLab Enterprise Edition EE 12.2 and later through 12.5 has Incorrect Access Control...
CVE-2019-19310: Insufficiently Protected Credentials
GitLab Enterprise Edition EE 9.0 and later through 12.5 allows Information Disclosure...
GitLab EE Cross-Site Scripting Vulnerability (CNVD-2020-03767)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A cross-site scripting vulnerability exists in GitLab...
GitLab CE/EE Cross-Site Scripting Vulnerability (CNVD-2020-03774)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A cross-site scripting vulnerability exists in GitLab...
GitLab CE/EE Access Control Error Vulnerability
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Community and...
CVE-2018-20498
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control...
CVE-2018-20491
An issue was discovered in GitLab Enterprise Edition 11.3.x and 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS...
CVE-2018-20489
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control...
CVE-2018-20488
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows Information Exposure...
CVE-2018-20497
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows SSRF...
CVE-2018-20499
An issue was discovered in GitLab Community and Enterprise Edition before 11.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows SSRF...
CVE-2018-20491
An issue was discovered in GitLab Enterprise Edition 11.3.x and 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS...
CVE-2018-20494
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control...
CVE-2018-20507: Missing Authentication for Critical Function
An issue was discovered in GitLab Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control...