2096 matches found
PT-2019-10096
Name of the Vulnerable Software and Affected Versions: GitLab Enterprise Edition versions 11.2.x through 11.4.x before 11.4.13 GitLab Enterprise Edition versions 11.5.x before 11.5.6 GitLab Enterprise Edition versions 11.6.x before 11.6.1 Description: The issue is related to Incorrect Access...
CVE-2018-20491: Improper Neutralization of Input During Web Page Generation
An issue was discovered in GitLab Enterprise Edition 11.3.x and 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS...
CVE-2018-20507: Missing Authentication for Critical Function
An issue was discovered in GitLab Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control...
Gitlab Information Disclosure Vulnerability (CNVD-2020-12718)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in Gitlab...
GitLab EE Elevation of Privilege Vulnerability
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Enterprise...
GitLab Information Disclosure Vulnerability (CNVD-2020-20438)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Enterprise...
CVE-2019-18446
An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.4. It has Insecure Permissions issue 1 of 2...
UBUNTU-CVE-2019-18449
An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the autocomplete feature. It has Insecure Permissions issue 2 of 2...
UBUNTU-CVE-2019-18448
An issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Incorrect Access Control...
UBUNTU-CVE-2019-18450
An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project labels feature. It has Insecure Permissions...
CVE-2019-18448
An issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Incorrect Access Control...
CVE-2019-18452
An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4 when moving an issue to a public project from a private one. It has Insecure Permissions...
CVE-2019-18455
Removed by vendor...
CVE-2019-18460: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.4 in the Comments Search feature provided by the Elasticsearch integration. It has Incorrect Access Control...
CVE-2019-18448: Undefined Security Weakness
An issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Incorrect Access Control...
CVE-2019-18447: Incorrect Permission Assignment for Critical Resource
An issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Insecure Permissions...
PT-2019-15404
Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions prior to 12.4 Description An issue was discovered that results in Insecure Permissions. Recommendations For versions prior to 12.4, update to version 12.4 or later to resolve the issue...
CVE-2019-18459: Incorrect Permission Assignment for Critical Resource
An issue was discovered in GitLab Community and Enterprise Edition 11.3 to 12.3 in the protected environments feature. It has Insecure Permissions issue 3 of 4...