Linux Distros Unpatched Vulnerability : CVE-2021-22172

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper authorization in GitLab 12.8+ allows a guest user in a private project to view tag data that should be inaccessible on the releases page CVE-2021-22172...

Linux Distros Unpatched Vulnerability : CVE-2021-22168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A regular expression denial of service issue has been discovered in NuGet API affecting all versions of GitLab starting from version 12.8. CVE-2021-22168 Note...

BIT-GITLAB-2021-22168

A regular expression denial of service issue has been discovered in NuGet API affecting all versions of GitLab starting from version 12.8...

BIT-GITLAB-2021-22172

Improper authorization in GitLab 12.8+ allows a guest user in a private project to view tag data that should be inaccessible on the releases page...

Authorization

Improper authorization in GitLab 12.8+ allows a guest user in a private project to view tag data that should be inaccessible on the releases page...

PT-2021-14895 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 12.8 and later Description: An information disclosure issue allowed a user with access to the server logs to see sensitive information that wasn't properly redacted. Recommendations: For GitLab versions 12.8 and later, update ...

PT-2020-13408 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.8 through 13.0.1 Description: A Stored Cross-Site Scripting issue allowed the execution of Javascript payloads on the Metrics Dashboard. Recommendations: For GitLab CE/EE versions 12.8 through 13.0.1, update to a...

CVE-2020-13266

Insecure authorization in Project Deploy Keys in GitLab CE/EE 12.8 and later through 13.0.1 allows users to update permissions of other users' deploy keys under certain conditions...

CVE-2020-10535

GitLab 12.8.x before 12.8.6, when sign-up is enabled, allows remote attackers to bypass email domain restrictions within the two-day grace period for an unconfirmed email address...