Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:14 p.m.4 views

CVE-2025-12555

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that, under certain conditions, could have allowed an authenticated user to access previous pipeline job information on projects with repository and CI/CD...

4.3CVSS5.8AI score0.00243EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/03/18 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-12555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that, under certain...

4.3CVSS5.9AI score0.00243EPSS
Exploits0References2
NVD
NVD
added 2026/03/11 5:16 p.m.2 views

CVE-2025-12555

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that, under certain conditions, could have allowed an authenticated user to access previous pipeline job information on projects with repository and CI/CD...

4.3CVSS0.00243EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/11 4:7 p.m.3 views

CVE-2025-12555

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that, under certain conditions, could have allowed an authenticated user to access previous pipeline job information on projects with repository and CI/CD...

4.3CVSS5.8AI score0.00243EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2026/03/11 4:7 p.m.53 views

CVE-2025-12555

GitLab CVE-2025-12555 fixes an improper authorization check that could let an authenticated user access previous pipeline job information on projects with repository/CI-CD disabled. Affected: GitLab CE/EE versions 15.1–before 18.7.6, 18.8–before 18.8.6, and 18.9–before 18.9.2. Root cause: insuffi...

4.3CVSS5.8AI score0.00243EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2026/03/11 4:7 p.m.3 views

CVE-2025-12555 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that, under certain conditions, could have allowed an authenticated user to access previous pipeline job information on projects with repository and CI/CD...

4.3CVSS5.8AI score0.00243EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/03/11 12:0 a.m.2 views

GitLab Enterprise Edition(EE)和GitLab Community Edition(CE) 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of the American company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community version of GitLab. There were security vulnerabilities in versions prior to 18.7.6,...

4.3CVSS5.8AI score0.00243EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2019-4576

Malware in sbrugna...

4.3CVSS4.6AI score0.00964EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 8:12 a.m.7 views

CVE-2019-15729

An issue was discovered in GitLab Community and Enterprise Edition 8.18 through 12.2.1. An internal endpoint unintentionally disclosed information about the last pipeline that ran for a merge request...

7.5CVSS6.3AI score0.0173EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:25 a.m.9 views

CVE-2019-13002

An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.0.2. Unauthorized users were able to read pipeline information of the last merge request. It has Incorrect Access Control...

4.3CVSS6.2AI score0.00964EPSS
Exploits0References1
OSV
OSV
added 2020/03/10 3:15 p.m.12 views

CVE-2019-13002

An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.0.2. Unauthorized users were able to read pipeline information of the last merge request. It has Incorrect Access Control...

4.3CVSS6.2AI score
Exploits0References2
Debian CVE
Debian CVE
added 2020/03/10 2:51 p.m.21 views

CVE-2019-13002

Removed by vendor...

4.3CVSS5.8AI score0.00964EPSS
Exploits0
Cvelist
Cvelist
added 2020/03/10 2:51 p.m.25 views

CVE-2019-13002

An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.0.2. Unauthorized users were able to read pipeline information of the last merge request. It has Incorrect Access Control...

4.6AI score0.00964EPSS
Exploits0References2
FreeBSD
FreeBSD
added 2019/07/03 12:0 a.m.152 views

Gitlab -- Multiple Vulnerabilities

Gitlab reports: Ability to Write a Note to a Private Snippet Recent Pipeline Information Disclosed to Unauthorised Users Resource Exhaustion Attack Error Caused by Encoded Characters in Comments Authorization Issues in GraphQL Number of Merge Requests was Accessible Enabling One of the Service...

7.5CVSS2AI score0.01403EPSS
Exploits0References1
Rows per page
Query Builder