2992 matches found
CVE-2020-7968
GitLab EE 8.0 through 12.7.2 has Incorrect Access Control...
Directory traversal
GitLab EE 11.11 and later through 12.7.2 allows Directory Traversal...
CVE-2020-7967
GitLab EE 8.0 through 12.7.2 has Insecure Permissions issue 1 of 2...
CVE-2020-7972
GitLab EE 12.2 has Insecure Permissions issue 2 of 2...
Denial of service
GitLab EE 12.6 and later through 12.7.2 allows Denial of Service...
Information disclosure
GitLab EE 8.0 and later through 12.7.2 allows Information Disclosure...
CVE-2020-7968
GitLab EE 8.0 through 12.7.2 has Incorrect Access Control...
Improper access control
GitLab EE 12.4 and later through 12.7.2 has Incorrect Access Control...
Design/Logic Flaw
GitLab EE 8.8 and later through 12.7.2 has Insecure Permissions...
CVE-2020-7966
GitLab EE versions 11.11 through 12.7.2 contain a Directory Traversal vulnerability. The issue allows an attacker to read files on the server via crafted requests, constituting a risk to confidential data and system files. Public sources in multiple catalogs consistently describe the affected ran...
CVE-2020-7966
GitLab EE 11.11 and later through 12.7.2 allows Directory Traversal...
CVE-2020-7966
Removed by vendor...
CVE-2020-7967
GitLab EE versions 8.0 through 12.7.2 are affected by an insecure permissions issue (issue 1 of 2). Root cause: insecure permission handling in GitLab EE, enabling improper access control. Impact: information access/privilege exposure is implied; exact assets and vectors are not detailed in the p...
CVE-2020-7967
Removed by vendor...
CVE-2020-7967
GitLab EE 8.0 through 12.7.2 has Insecure Permissions issue 1 of 2...
CVE-2020-7968
GitLab Enterprise Edition (EE) versions 8.0 through 12.7.2 are affected by an Incorrect Access Control vulnerability. The issue is documented across multiple sources (including CVE-2020-7968) and aligns with a public remediation path: upgrading to GitLab EE 12.7.4 (security release) mitigates the...
CVE-2020-7968
GitLab EE 8.0 through 12.7.2 has Incorrect Access Control...
CVE-2020-7969
CVE-2020-7969 affects GitLab EE 8.0–12.7.2 and enables information disclosure. The embedded data show a HIGH-severity (CVSSv3.1 base score 7.5) vulnerability with network access and no authentication. Exploitation details are not provided in the documents. Remediation suggested by the sources is ...