PT-2020-13450 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 13.1.10 GitLab versions prior to 13.2.8 GitLab versions prior to 13.3.4 Description: A blind SSRF attack was possible through the repository mirroring feature. Recommendations: For versions prior to 13.1.10, update to...

UBUNTU-CVE-2020-12277

GitLab 10.8 through 12.9 has a vulnerability that allows someone to mirror a repository even if the feature is not activated...