1712 matches found
PT-2019-9858
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 10.1 through 11.5 Description The issue allows a user to make comments on a locked issue due to an insecure direct object reference. Recommendations For versions 10.1 through 11.3.10, update to version 11.3.11 or later. F...
PT-2019-9868
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 8.18 up to 11.x before 11.3.11 GitLab CE/EE versions 11.4.x before 11.4.8 GitLab CE/EE versions 11.5.x before 11.5.1 Description The issue is related to CRLF Injection in Project Mirroring when using the Git protocol...
CVE-2018-19585: Improper Neutralization of CRLF Sequences
GitLab CE/EE versions 8.18 up to 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1 have CRLF Injection in Project Mirroring when using the Git protocol...
CVE-2018-18643
GitLab CE & EE 11.2 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 have Persistent XSS...
CVE-2018-18643: Improper Neutralization of Input During Web Page Generation
GitLab CE & EE 11.2 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 have Persistent XSS...
CVE-2018-19856: Improper Limitation of a Pathname to a Restricted Directory
GitLab CE/EE before 11.3.12, 11.4.x before 11.4.10, and 11.5.x before 11.5.3 allows Directory Traversal in Templates API...
PT-2019-9934
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 11.3.x through 11.3.11 GitLab CE/EE versions 11.4.x through 11.4.9 GitLab CE/EE versions 11.5.x through 11.5.2 Description The issue allows Directory Traversal in Templates API. Recommendations For GitLab CE/EE versions...
CVE-2018-12605
An issue was discovered in GitLab Community Edition and Enterprise Edition 10.7.x before 10.7.6. The usage of 'urlfor' contained a XSS issue due to it allowing arbitrary protocols as a parameter...
