Gitlab Community And Enterprise Editions (Gitlab) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2018-03-22. Vendor: Gitlab.
CVEs of Gitlab Community And Enterprise Editions
- CVE-2017-0920 - CVSS 4.3 (medium), 2018-03-22: GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the…
- CVE-2018-3710 - CVSS 7.8 (high), 2018-03-21: Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code…
- CVE-2017-0916 - CVSS 9.8 (critical), 2018-03-21: Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the system_hook_push queue through web hook component resulting in remote…
- CVE-2017-0922 - CVSS 7.5 (high), 2018-03-21: Gitlab Enterprise Edition version 10.3 is vulnerable to an authorization bypass issue in the GitLab Projects::BoardsController component resulting in an…
- CVE-2017-0925 - CVSS 7.2 (high), 2018-03-21: Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint…
- CVE-2017-0915 - CVSS 9.8 (critical), 2018-03-21: Gitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the GitlabProjectsImportService resulting in remote code execution.
- CVE-2017-0918 - CVSS 8.8 (high), 2018-03-21: Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution.
- CVE-2017-0924 - CVSS 6.1 (medium), 2018-03-21: Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scripting.
- CVE-2017-0927 - CVSS 6.5 (medium), 2018-03-21: Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of…
- CVE-2017-0914 - CVSS 7.5 (high), 2018-03-21: Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in…
- CVE-2017-0917 - CVSS 6.1 (medium), 2018-03-21: Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in persistent cross site scripting.
- CVE-2017-0923 - CVSS 6.1 (medium), 2018-03-21: Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site scripting.
- CVE-2017-0926 - CVSS 8.8 (high), 2018-03-21: Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component resulting in unauthorized user login.
