CVE-2018-19585: Improper Neutralization of CRLF Sequences

GitLab CE/EE versions 8.18 up to 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1 have CRLF Injection in Project Mirroring when using the Git protocol...

CVE-2018-18643: Improper Neutralization of Input During Web Page Generation

GitLab CE & EE 11.2 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 have Persistent XSS...

CVE-2018-19856: Improper Limitation of a Pathname to a Restricted Directory

GitLab CE/EE before 11.3.12, 11.4.x before 11.4.10, and 11.5.x before 11.5.3 allows Directory Traversal in Templates API...

CVE-2018-12605

An issue was discovered in GitLab Community Edition and Enterprise Edition 10.7.x before 10.7.6. The usage of 'urlfor' contained a XSS issue due to it allowing arbitrary protocols as a parameter...

CVE-2021-47990

...

CVE-2023-47205

CVE-2023-47205 is rejected as unused by its CNA, representing no active vulnerability.

CVE-2023-47205

...

CVE-2021-47994

...