CVEs (1,408)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
GitLab EE 8.8 and later through 12.7.2 has Insecure Permissions. |
GitLab EE 12.4 and later through 12.7.2 has Incorrect Access Control. |
GitLab EE 10.1 through 12.7.2 allows Information Disclosure. |
GitLab through 12.7.2 allows XSS. |
GitLab EE 12.2 has Insecure Permissions (issue 2 of 2). |
GitLab EE 11.0 and later through 12.7.2 allows XSS. |
GitLab EE 8.0 and later through 12.7.2 allows Information Disclosure. |
GitLab EE 8.0 through 12.7.2 has Incorrect Access Control. |
GitLab EE 8.0 through 12.7.2 has Insecure Permissions (issue 1 of 2). |
GitLab EE 11.11 and later through 12.7.2 allows Directory Traversal. |
GitLab EE 8.9 and later through 12.7.2 has Insecure Permission |
GitLab EE 8.9 and later through 12.7.2 has Insecure Permission |
The parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to gain privil...Show more |
The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-s...Show more |
An authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the merge request approval rules to be overridden without appropriate permissions. |
An authorization issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 that prevented owners and maintainer to delete epic comments. |
An information disclosure issue was discovered GitLab versions < 12.1.2, < 12.0.4, and < 11.11.6 in the security dashboard which could result in disclosure of vulnerability feedback information. |
An privilege escalation issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 when Mattermost slash commands are used with a blocked account. |
An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to disclose label names. |
An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosure of the newly created issue ID. |