4833 matches found
Improper access control
GitLab EE 12.4 and later through 12.7.2 has Incorrect Access Control...
Denial of service
GitLab EE 12.6 and later through 12.7.2 allows Denial of Service...
CVE-2020-7968
GitLab EE 8.0 through 12.7.2 has Incorrect Access Control...
CVE-2020-7972
GitLab EE 12.2 has Insecure Permissions issue 2 of 2...
CVE-2020-7967
GitLab EE 8.0 through 12.7.2 has Insecure Permissions issue 1 of 2...
Directory traversal
GitLab EE 11.11 and later through 12.7.2 allows Directory Traversal...
Design/Logic Flaw
GitLab EE 8.8 and later through 12.7.2 has Insecure Permissions...
CVE-2020-7966
GitLab EE 11.11 and later through 12.7.2 allows Directory Traversal...
CVE-2020-7966
Removed by vendor...
CVE-2020-7966
GitLab EE versions 11.11 through 12.7.2 contain a Directory Traversal vulnerability. The issue allows an attacker to read files on the server via crafted requests, constituting a risk to confidential data and system files. Public sources in multiple catalogs consistently describe the affected ran...
CVE-2020-7967
GitLab EE 8.0 through 12.7.2 has Insecure Permissions issue 1 of 2...
CVE-2020-7967
GitLab EE versions 8.0 through 12.7.2 are affected by an insecure permissions issue (issue 1 of 2). Root cause: insecure permission handling in GitLab EE, enabling improper access control. Impact: information access/privilege exposure is implied; exact assets and vectors are not detailed in the p...
CVE-2020-7967
Removed by vendor...
CVE-2020-7968
GitLab EE 8.0 through 12.7.2 has Incorrect Access Control...
CVE-2020-7968
GitLab Enterprise Edition (EE) versions 8.0 through 12.7.2 are affected by an Incorrect Access Control vulnerability. The issue is documented across multiple sources (including CVE-2020-7968) and aligns with a public remediation path: upgrading to GitLab EE 12.7.4 (security release) mitigates the...
CVE-2020-7969
Removed by vendor...
CVE-2020-7969
CVE-2020-7969 affects GitLab EE 8.0–12.7.2 and enables information disclosure. The embedded data show a HIGH-severity (CVSSv3.1 base score 7.5) vulnerability with network access and no authentication. Exploitation details are not provided in the documents. Remediation suggested by the sources is ...
CVE-2020-7972
CVE-2020-7972 concerns GitLab Enterprise Edition 12.2 with an insecure permissions/privilege vulnerability. Multiple connected sources identify GitLab EE 12.2 as affected and describe an insecure privilege condition (GitLab EE 12.2 vulnerability). The CVE status is corroborated across OSV/ CNVD /...