Gitlab Ceee (Gitlab) - vulnerabilities (CVEs)
22 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2020-12-11. Vendor: Gitlab.
CVEs of Gitlab Ceee
- CVE-2020-26408 - CVSS 5.3 (medium), 2020-12-11: A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2 that allows an…
- CVE-2020-13357 - CVSS 4.3 (medium), 2020-12-11: An issue was discovered in Gitlab CE/EE versions >= 13.1 to <13.4.7, >= 13.5 to <13.5.5, and >= 13.6 to <13.6.2 allowed an unauthorized user to access the…
- CVE-2020-26417 - CVSS 5.3 (medium), 2020-12-11: Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2,…
- CVE-2020-26413 - CVSS 5.3 (medium), 2020-12-11: An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13.6.2. Information disclosure via GraphQL results in user email…
- CVE-2020-26409 - CVSS 6.5 (medium), 2020-12-11: A DOS vulnerability exists in Gitlab CE/EE >=10.3, <13.4.7,>=13.5, <13.5.5,>=13.6, <13.6.2 that allows an attacker to trigger uncontrolled resource by…
- CVE-2020-26407 - CVSS 5.5 (medium), 2020-12-10: A XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6 before 13.6.2 that allows an attacker to perform cross-site…
- CVE-2020-13359 - CVSS 7.6 (high), 2020-11-19: The Terraform API in GitLab CE/EE 12.10+ exposed the object storage signed URL on the delete operation allowing a malicious project maintainer to overwrite…
- CVE-2020-13356 - CVSS 8.2 (high), 2020-11-19: An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.8.9. A specially crafted request could bypass Multipart protection and…
- CVE-2020-13355 - CVSS 8.1 (high), 2020-11-19: An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14. A path traversal is found in LFS Upload that allows attacker to…
- CVE-2020-26405 - CVSS 7.1 (high), 2020-11-17: Path traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8 allows an attacker to save packages in arbitrary locations.…
- CVE-2020-13351 - CVSS 6.5 (medium), 2020-11-17: Insufficient permission checks in scheduled pipeline API in GitLab CE/EE 13.0+ allows an attacker to read variable names and values for scheduled pipelines on…
- CVE-2020-13350 - CVSS 4.3 (medium), 2020-11-17: CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able to target GitLab instance administrators to pause/resume…
- CVE-2020-13358 - CVSS 5.5 (medium), 2020-11-17: A vulnerability in the internal Kubernetes agent api in GitLab CE/EE version 13.3 and above allows unauthorized access to private projects. Affected versions…
- CVE-2020-13354 - CVSS 4.3 (medium), 2020-11-17: A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 12.6. The container registry name check could cause exponential number of…
- CVE-2020-13352 - CVSS 5.3 (medium), 2020-11-17: Private group info is leaked leaked in GitLab CE/EE version 10.2 and above, when the project is moved from private to public group. Affected versions are:…
- CVE-2019-15585 - CVSS 9.8 (critical), 2020-01-28: Improper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) in the GitLab SAML…
- CVE-2019-5465 - CVSS 4.3 (medium), 2020-01-28: An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosure of the newly…
- CVE-2019-15583 - CVSS 7.5 (high), 2020-01-28: An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE). When an issue was moved…
- CVE-2019-5464 - CVSS 9.8 (critical), 2020-01-28: A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which could result in SSRF where the library is…
- CVE-2019-15579 - CVSS 5.3 (medium), 2020-01-28: An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) where the assignee(s) of a…
- CVE-2019-15586 - CVSS 6.1 (medium), 2020-01-28: A XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin.
- CVE-2019-15578 - CVSS 5.3 (medium), 2020-01-28: An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE). The path of a private…
