PT-2020-20284 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab Enterprise Edition EE versions 12.5.0 through 12.7.5 Description: The issue allows project access to unauthorized users when a group is shared with another group. Recommendations: For GitLab Enterprise Edition EE versions 12.5.0 throug...

GitLab EE Insecure Privilege Vulnerability (CNVD-2020-14339)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE is a GitLab Enterprise Edition GitLab EE...

GitLab EE Insecure Privilege Vulnerability (CNVD-2020-14342)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE 12.2 suffers from an insecure privilege...

GitLab EE Memory Corruption Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab EE. The...

GitLab EE Insecure Privilege Vulnerability (CNVD-2020-14338)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE 8.9 - 12.7.2 suffers from an insecure privilege...

GitLab EE Insecure Privilege Vulnerability (CNVD-2020-14343)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE 8.0 - 12.7.2 suffers from an insecure privilege...

GitLab EE Denial of Service Vulnerability

GitLab is a Ruby on Rails developed, self-hosted, Git version control system project repository application from GitLab, Inc. The program can be used to access the project's file contents, commit history, bug list , etc. Git is a free, open source distributed version control system. A security...

GitLab EE Information Disclosure Vulnerability (CNVD-2020-13699)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE 10.1 - 12.7.2 suffers from an information disclosu...

GitLab EE Information Disclosure Vulnerability (CNVD-2020-07211)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE 8.0 - 12.7.2 suffers from an information disclosur...

GitLab EE Directory Traversal Vulnerability

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. A directory traversal vulnerability exists in GitLab EE 11.1...

CVE-2020-6833

An issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to package and file disclosure via request smuggling...

CVE-2020-7971

GitLab EE 11.0 and later through 12.7.2 allows XSS...

CVE-2020-7974

GitLab EE 10.1 through 12.7.2 allows Information Disclosure...

CVE-2020-7968

GitLab EE 8.0 through 12.7.2 has Incorrect Access Control...

CVE-2020-8114

GitLab EE 8.9 and later through 12.7.2 has Insecure Permission...

PT-2020-19892 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 8.8 through 12.7.2 Description: The issue concerns insecure permissions in GitLab EE. Recommendations: For GitLab EE versions 8.8 through 12.7.2, update to a version later than 12.7.2 to resolve the issue...

PT-2020-19884 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 8.0 through 12.7.2 Description: The issue is related to incorrect access control. Recommendations: For GitLab EE versions 8.0 through 12.7.2, update to a version that contains a fix for this issue...

PT-2020-19893 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 12.6 through 12.7.2 Description: The issue allows for Denial of Service. There is a vulnerability in GitLab EE. Recommendations: For GitLab EE versions 12.6 through 12.7.2, update to a version that contains a fix for this...

PT-2020-19885 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 8.0 through 12.7.2 Description: The issue allows information disclosure. Recommendations: For GitLab EE versions 8.0 through 12.7.2, update to a version that contains a fix for this issue...

PT-2020-19952 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 8.9 through 12.7.2 Description: The issue is related to insecure permissions. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where...