CVEs (1,408)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
In GitLab EE 11.3 through 12.5.3, 12.4.5, and 12.3.8, insufficient parameter sanitization for the Maven package registry could lead to privilege escalation and remote code execution vulnerabilities under certain conditio...Show more |
GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext. |
GitLab EE 12.3 through 12.5, 12.4.3, and 12.3.6 allows Denial of Service. Certain characters were making it impossible to create, edit, or view issues and commits. |
GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 has Incorrect Access Control. After a project changed to private, previously forked repositories were still able to get information about the private project through the AP...Show more |
GitLab Enterprise Edition (EE) 9.0 and later through 12.5 allows Information Disclosure. |
GitLab Enterprise Edition (EE) 8.90 and later through 12.5 has Incorrect Access Control. |
GitLab Enterprise Edition (EE) 8.2 and later through 12.5 has Insecure Permissions. |
GitLab Enterprise Edition (EE) 11.9 and later through 12.5 has Insecure Permissions. |
GitLab Enterprise Edition (EE) 6.7 and later through 12.5 allows SSRF. |
GitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access Control (issue 2 of 2). |
GitLab Enterprise Edition (EE) 11.3 and later through 12.5 allows an Insecure Direct Object Reference (IDOR). |
GitLab Enterprise Edition (EE) 10.8 and later through 12.5 has Incorrect Access Control. |
GitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access Control (issue 1 of 2). |
GitLab Enterprise Edition (EE) 12.2 and later through 12.5 has Incorrect Access Control. |
GitLab Enterprise Edition (EE) 12.3 and later through 12.5 has Incorrect Access Control. |
GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 allows XSS in group and profile fields. |
GitLab Community Edition (CE) and Enterprise Edition (EE). 9.6 and later through 12.5 has Incorrect Access Control. |
Gitlab Enterprise Edition (EE) 11.3 through 12.4.2 allows Directory Traversal. |
Gitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 2 of 2). |
Gitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 1 of 2). |