1268 matches found
PT-2018-14310
Name of the Vulnerable Software and Affected Versions GitLab Community Edition versions 11.0.0 through 11.1.8 GitLab Community Edition versions 11.2.0 through 11.2.5 GitLab Community Edition versions 11.3.0 through 11.3.2 Description An issue was discovered that leads to Information Exposure via...
CVE-2018-17975: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure via the GFM markdown API...
PT-2018-14287
Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 11.1.x through 11.1.7 GitLab Community and Enterprise Edition versions 11.2.x through 11.2.4 GitLab Community and Enterprise Edition versions 11.3.x through 11.3.1 Description An issue was...
CVE-2018-18646: Server-Side Request Forgery (SSRF)
An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It allows SSRF...
PT-2018-14558
Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions prior to 11.2.7 GitLab Community and Enterprise Edition versions 11.3.x prior to 11.3.8 GitLab Community and Enterprise Edition versions 11.4.x prior to 11.4.3 Description The issue concerns...
PT-2018-14555
Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions prior to 11.2.7 GitLab Community and Enterprise Edition versions 11.3.x prior to 11.3.8 GitLab Community and Enterprise Edition versions 11.4.x prior to 11.4.3 Description The issue allows for...
CVE-2018-17976: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure via Epic change descriptions...
PT-2018-14557
Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions prior to 11.2.7 GitLab Community and Enterprise Edition versions 11.3.x prior to 11.3.8 GitLab Community and Enterprise Edition versions 11.4.x prior to 11.4.3 Description The issue is related t...
CVE-2018-18649: Undefined Security Weakness
An issue was discovered in the wiki API in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It allows for remote code execution...
PT-2018-14559
Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 11.2.7 and earlier, 11.3.x before 11.3.8, 11.4.x before 11.4.3 Description An issue in the wiki API allows for remote code execution. Recommendations For versions 11.2.7 and earlier, update to...
CVE-2018-16049: Insertion of Sensitive Information into Log File
An issue was discovered in GitLab Community and Enterprise Edition before 11.0.6, 11.1.x before 11.1.5, and 11.2.x before 11.2.2. There is Sensitive Data Disclosure in Sidekiq Logs through an Error Message...
CVE-2018-12605: Improper Neutralization of Input During Web Page Generation
An issue was discovered in GitLab Community Edition and Enterprise Edition 10.7.x before 10.7.6. The usage of 'urlfor' contained a XSS issue due to it allowing arbitrary protocols as a parameter...
CVE-2018-12606: Improper Neutralization of Input During Web Page Generation
An issue was discovered in GitLab Community Edition and Enterprise Edition before 10.7.6, 10.8.x before 10.8.5, and 11.x before 11.0.1. The wiki contains a persistent XSS issue due to a lack of output encoding affecting a specific markdown feature...
CVE-2018-12607: Improper Neutralization of Input During Web Page Generation
An issue was discovered in GitLab Community Edition and Enterprise Edition before 10.7.6, 10.8.x before 10.8.5, and 11.x before 11.0.1. The charts feature contained a persistent XSS issue due to a lack of output encoding...
CVE-2018-14601: Undefined Security Weakness
An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.2. A Denial of Service can occur because Markdown rendering times are slow...
CVE-2018-14606: Improper Neutralization of Input During Web Page Generation
An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. XSS can occur via a Milestone name during a promotion...
CVE-2018-14364
GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and resultant remote code execution via the GitLab projects import component...
CVE-2017-0919: Missing Authentication for Critical Function
GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the GitLab import component resulting in an attacker being able to perform operations under a group in which they were previously unauthorized...
GitLab Community Edition and Enterprise Edition HTML Injection Vulnerability
GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository, which has similar functionality to Github for accessing the contents of a project's files, commit history, bug lists, and more. An HTML injection...
