3081 matches found
CVE-2020-10076
GitLab 12.1 through 12.8.1 allows XSS. A stored cross-site scripting vulnerability was discovered when displaying merge requests...
CVE-2020-10076
GitLab 12.1 through 12.8.1 allows XSS. A stored cross-site scripting vulnerability was discovered when displaying merge requests...
Cross site scripting
GitLab 12.1 through 12.8.1 allows XSS. A stored cross-site scripting vulnerability was discovered when displaying merge requests...
CVE-2020-10085
GitLab 12.3.5 through 12.8.1 allows Information Disclosure. A particular view was exposing merge private merge request titles...
CVE-2020-10085
GitLab 12.3.5 through 12.8.1 allows Information Disclosure. A particular view was exposing merge private merge request titles...
CVE-2020-10078
GitLab 12.1 through 12.8.1 allows XSS. The merge request submission form was determined to have a stored cross-site scripting vulnerability...
CVE-2020-10078
GitLab 12.1 through 12.8.1 allows XSS. The merge request submission form was determined to have a stored cross-site scripting vulnerability...
Information disclosure
GitLab 12.3.5 through 12.8.1 allows Information Disclosure. A particular view was exposing merge private merge request titles...
CVE-2020-10085
GitLab 12.3.5 through 12.8.1 allows Information Disclosure. A particular view was exposing merge private merge request titles...
Cross site scripting
GitLab 12.1 through 12.8.1 allows XSS. The merge request submission form was determined to have a stored cross-site scripting vulnerability...
CVE-2020-10078
GitLab 12.1 through 12.8.1 allows XSS. The merge request submission form was determined to have a stored cross-site scripting vulnerability...
CVE-2020-10076
GitLab 12.1 through 12.8.1 allows XSS. A stored cross-site scripting vulnerability was discovered when displaying merge requests...
CVE-2020-10076
Removed by vendor...
CVE-2020-10076
Summary: CVE-2020-10076 affects GitLab 12.1–12.8.1 and is a stored cross-site scripting (XSS) vulnerability observed when rendering merge requests. The Red Hat, OSV, CNVD and other feeds corroborate this description, listing the same affected range and issue. What is affected: GitLab application ...
CVE-2020-10078
Removed by vendor...
CVE-2020-10078
GitLab 12.1 through 12.8.1 allows XSS. The merge request submission form was determined to have a stored cross-site scripting vulnerability...
CVE-2020-10085
Removed by vendor...
CVE-2020-10085
GitLab 12.3.5 through 12.8.1 allows Information Disclosure. A particular view was exposing merge private merge request titles...
PT-2020-11903 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 12.1 through 12.8.1 Description: The issue is related to a stored cross-site scripting vulnerability in the merge request submission form. This allows for XSS attacks. Recommendations: For GitLab versions 12.1 through 12.8.1,...
PT-2020-11901 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 12.1 through 12.8.1 Description: A stored cross-site scripting issue was found when displaying merge requests, allowing for XSS attacks. Recommendations: For versions 12.1 through 12.8.1, update to a version that contains a fi...