322 matches found
PT-2021-14888 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 3.0.1 and later Description: An issue has been discovered in GitLab where improper access control allows demoted project members to access details on authored merge requests. Recommendations: For GitLab versions 3.0.1 and late...
CVE-2021-22182
An issue has been discovered in GitLab affecting all versions starting with 13.7. GitLab was vulnerable to a stored XSS in merge request...
UBUNTU-CVE-2021-22182
An issue has been discovered in GitLab affecting all versions starting with 13.7. GitLab was vulnerable to a stored XSS in merge request...
PT-2021-14893 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 13.7 and later Description: A stored XSS issue has been found in merge requests, affecting the security of the system. Recommendations: For versions 13.7 and later, update to a version that includes a fix for this issue...
GitLab 跨站脚本漏洞
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A cross-site scripting vulnerability exists in GitLab versions after 13.7, which stems from the...
CVE-2020-13323
A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos...
CVE-2020-13323
A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos...
CVE-2020-13323
A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos...
Design/Logic Flaw
A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos...
UBUNTU-CVE-2020-13323
A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos...
GitLab Information Disclosure Vulnerability (CNVD-2020-58041)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...
CVE-2020-13323
A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos...
CVE-2020-13323
CVE-2020-13323 affects GitLab versions prior to 13.1. Under certain conditions, private merge requests could be read via Todos , an information-disclosure vulnerability. The connected documents specify the affected product and symptom but do not provide a root cause analysis or a confirmed patch/...
CVE-2020-13323
Removed by vendor...
PT-2020-13464 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 13.1 Description: A vulnerability was discovered that allows private merge requests to be read via Todos under certain conditions. Recommendations: For versions prior to 13.1, update to version 13.1 or later to resolv...
GitLab: Stored-XSS in merge requests
Hi team, A stored XSS is existing in the merge requests pages. Steps to reproduce 1. In any existing project or create a new project with checking option "Initialize repository with a README" 2. Create a new branch with name '', e.g., git push origin master:"''" 3. Create a new merge request from...
FreeBSD : Gitlab -- Multiple Vulnerabilities (e8483115-8b8e-11ea-bdcf-001b217b3468)
Gitlab reports : Path Traversal in NuGet Package Registry Workhorse Bypass Leads to File Disclosure OAuth Application Client Secrets Revealed Code Owners Approval Rules Are Not Updated for Existing Merge Requests When Source Branch Changes Code Owners Protection Not Enforced from Web UI Repositor...
CVE-2020-10076
GitLab 12.1 through 12.8.1 allows XSS. A stored cross-site scripting vulnerability was discovered when displaying merge requests...