CVE-2020-7974

GitLab EE 10.1 through 12.7.2 allows Information Disclosure...

CVE-2020-7969

GitLab EE 8.0 and later through 12.7.2 allows Information Disclosure...

CVE-2020-7969

GitLab EE 8.0 and later through 12.7.2 allows Information Disclosure...

CVE-2020-7968

GitLab EE 8.0 through 12.7.2 has Incorrect Access Control...

CVE-2020-7972

GitLab EE 12.2 has Insecure Permissions issue 2 of 2...

CVE-2020-7967

GitLab EE 8.0 through 12.7.2 has Insecure Permissions issue 1 of 2...

Denial of service

GitLab EE 12.6 and later through 12.7.2 allows Denial of Service...

Information disclosure

GitLab EE 8.0 and later through 12.7.2 allows Information Disclosure...

CVE-2020-7966

GitLab EE 11.11 and later through 12.7.2 allows Directory Traversal...

CVE-2020-7966

Removed by vendor...

CVE-2020-7967

Removed by vendor...

CVE-2020-7969

Removed by vendor...

CVE-2020-7972

Removed by vendor...

CVE-2020-7972

GitLab EE 12.2 has Insecure Permissions issue 2 of 2...

CVE-2020-7974

GitLab EE 10.1 through 12.7.2 allows Information Disclosure...

CVE-2020-7974

Removed by vendor...

CVE-2020-8114

Removed by vendor...

CVE-2019-15583

An information disclosure exists in 12.3.2, 12.2.6, and 12.1.12 for GitLab Community Edition CE and Enterprise Edition EE. When an issue was moved to a public project from a private one, the associated private labels and the private project namespace would be disclosed through the GitLab API...

CVE-2019-5474

Removed by vendor...

CVE-2019-5474

CVE-2019-5474 concerns GitLab EE: an authorization flaw in versions earlier than 12.1.2, 12.0.4, and 11.11.6 allows merge request approval rules to be overridden without proper permissions. The connected records consistently describe the issue as an authorization problem affecting the merge reque...