4832 matches found
PT-2020-10204
Name of the Vulnerable Software and Affected Versions GitLab EE versions 10.5 through 12.5.3 GitLab EE version 12.4.5 GitLab EE version 12.3.8 Description The issue allows private code to be disclosed via the Group Search API provided by the Elasticsearch integration when transferring a public...
PT-2020-10132
Name of the Vulnerable Software and Affected Versions GitLab EE versions 8.14 through 12.5 GitLab EE version 12.4.3 GitLab EE version 12.3.6 Description The issue concerns incorrect access control. After a project is changed to private, previously forked repositories can still access information...
CVE-2019-19629: Undefined Security Weakness
In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private code would be disclosed via the Group Search API provided by the Elasticsearch integration...
CVE-2019-19628: Improper Limitation of a Pathname to a Restricted Directory
In GitLab EE 11.3 through 12.5.3, 12.4.5, and 12.3.8, insufficient parameter sanitization for the Maven package registry could lead to privilege escalation and remote code execution vulnerabilities under certain conditions...
CVE-2019-19314: Cleartext Storage of Sensitive Information
GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext...
CVE-2019-19313: Improper Handling of Exceptional Conditions
GitLab EE 12.3 through 12.5, 12.4.3, and 12.3.6 allows Denial of Service. Certain characters were making it impossible to create, edit, or view issues and commits...
Improper access control
GitLab Community Edition CE and Enterprise Edition EE through 12.5 has Incorrect Access Control issue 2 of 2...
CVE-2019-19310
CVE-2019-19310 affects GitLab Enterprise Edition (EE) versions 9.0 through 12.5, allowing information disclosure. The connected Red Hat, NVD, Debian, and other feeds corroborate that EE 9.0+ through 12.5 is vulnerable to information leakage; no explicit root cause, affected file/component, or exp...
CVE-2019-19309
GitLab CVE-2019-19309 affects GitLab Enterprise Edition (EE) 8.90 and later through 12.5, described as an Incorrect Access Control issue. Connected sources confirm the affected product scope and that remediation was addressed in GitLab’s releases around 12.5 (e.g., security release 12-5-1). The C...
CVE-2019-19262
GitLab Enterprise Edition (EE) versions 11.9 through 12.5 have an insecure-permissions vulnerability (CVE-2019-19262). The issue concerns improper permissions on components that could enable partial disclosure of sensitive data, notably Grafana metrics, as documented in multiple sources. Affected...
CVE-2019-19260
Technical details about CVE-2019-19260 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories for affected products and fixes.
CVE-2019-19258
CVE-2019-19258 affects GitLab Enterprise Edition (EE) 10.8 and later through 12.5, described as Incorrect Access Control. Connected documents confirm the affected product/version and nature of the flaw but do not provide technical specifics (root cause, affected components, or fix). No explicit e...
CVE-2019-19256
Removed by vendor...
CVE-2019-19311
GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 allows XSS in group and profile fields...
CVE-2019-19254
CVE-2019-19254 affects GitLab Community Edition (CE) and Enterprise Edition (EE) from 9.6 up to 12.5, described as an Incorrect Access Control issue. The connected sources confirm the impacted versions and indicate a security release for GitLab 12.5.x (12.5.1) addressing the vulnerability; no exp...
PT-2020-10131
Name of the Vulnerable Software and Affected Versions GitLab EE versions 8.14 through 12.5 GitLab EE version 12.4.3 GitLab EE version 12.3.6 Description The issue allows for XSS in group and profile fields. Recommendations For GitLab EE versions 8.14 through 12.5, update to a version outside of...
PT-2020-10041
Name of the Vulnerable Software and Affected Versions Gitlab Enterprise Edition EE versions 11.3 through 12.4.2 Description The issue allows Directory Traversal. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue w...
PT-2020-10108
Name of the Vulnerable Software and Affected Versions GitLab Enterprise Edition EE versions 12.2 through 12.5 Description The issue is related to incorrect access control. Recommendations For GitLab Enterprise Edition EE versions 12.2 through 12.5, update to a version that contains a fix for this...