PT-2020-16413 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 13.3 through 13.3.8 GitLab EE versions 13.4 through 13.4.4 GitLab EE versions 13.5 through 13.5.1 Description: Certain SAST CiConfiguration information could be viewed by unauthorized users in GitLab EE. This information wa...

PT-2020-13489 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 10.2 through 13.3.8 GitLab EE versions 13.4 through 13.4.4 GitLab EE versions 13.5 through 13.5.1 Description: An issue has been discovered in GitLab EE where required CODEOWNERS approval could be bypassed by targeting a...

PT-2020-13492 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.0 through 13.3.9 GitLab CE/EE versions 13.4.0 through 13.4.5 GitLab CE/EE versions 13.5.0 through 13.5.2 Description: Insufficient permission checks in the scheduled pipeline API allow an attacker to read variable nam...

PT-2020-13491 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.3.0 through 13.3.8 GitLab CE/EE versions 13.4.0 through 13.4.4 GitLab CE/EE versions 13.5.0 through 13.5.1 Description: A CSRF issue in the runner administration page of GitLab CE/EE allows an attacker to target GitLa...

GitLab Enterprise Edition Security Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in the GitLab EE version...

PT-2020-13441 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.3 through 13.3.3 Description: The issue concerns an OAuth authorization scope change without user consent in the middle of the authorization flow. Recommendations: For GitLab CE/EE versions 13.3 through 13.3.3, update...

Vulnerability fixed in GitLab

A vulnerability has been fixed in GitLab Enterprise Edition. A malicious party could exploit the vulnerability to obtain of sensitive information. GitLab has released updates to fix the vulnerability. More information can be found on the page below: https://about.gitlab.com/releases/2020/08/18...

PT-2020-14477 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 11.3 through 13.1.2 Description: The issue is related to Incorrect Access Control in GitLab EE due to the Maven package upload endpoint. This allows for unauthorized access. Recommendations: For GitLab EE versions 11.3...

UBUNTU-CVE-2020-13262

Client-Side code injection through Mermaid markup in GitLab CE/EE 12.9 and later through 13.0.1 allows a specially crafted Mermaid payload to PUT requests on behalf of other users via clicking on a link...

PT-2020-13404 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 9.5 through 13.0.1 Description: An authorization issue was identified that could allow unauthorized users to impersonate a project maintainer, enabling them to perform limited actions. Recommendations: For GitLab EE version...

PT-2020-13414 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.0 through 13.0.1 Description: A Denial of Service issue allows system resources to be exhausted. Recommendations: For GitLab CE/EE versions 12.0 through 13.0.1, update to a version later than 13.0.1 to resolve the iss...

PT-2020-13418 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 10.6 through 13.0.5 Description: An authorization issue in the mirroring logic allowed read access to private repositories. Recommendations: For GitLab CE/EE versions 10.6 through 13.0.5, update to a version later than...

GitLab path traversal vulnerability (CNVD-2020-29843)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Enterprise...

PT-2020-13120 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 12.8 and later Description: The issue allows exposure of sensitive information to an unauthorized actor via NuGet. Recommendations: For GitLab EE versions 12.8 and later, at the moment, there is no information about a newer...

CVE-2020-11505

An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3. A Workhorse bypass could lead to NuGet package and file disclosure Exposure of Sensitive Information via request smuggling...

PT-2020-12652 · Microsoft +1 · Nuget +2

Name of the Vulnerable Software and Affected Versions: GitLab Community Edition CE versions 12.7.x through 12.7.8 GitLab Community Edition CE versions 12.8.x through 12.8.8 GitLab Community Edition CE versions 12.9.x through 12.9.2 GitLab Enterprise Edition EE versions 12.7.x through 12.7.8 GitLa...

Unspecified Vulnerability in GitLab EE/CE

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab EE/CE, no detai...

PT-2020-12461 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE/CE versions 8.17 to 12.9 Description: The issue concerns information leakage when querying a merge request widget. Recommendations: For GitLab EE/CE versions 8.17 to 12.9, update to a version that contains a fix for this issue to...

GitLab EE Path Traversal Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A path traversal vulnerability exists in the NPM feature ...

PT-2020-12445 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 11.7 through 12.9 Description: The NPM feature in GitLab EE is affected by a path traversal issue. Recommendations: For versions 11.7 through 12.9, update to a version that contains a fix for this issue to prevent path...