← Back

Gitlab

gitlab

Vendor: Gitlab • 1,496 CVEs

CVEs (1,496)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-9176
1Gitlab
1Gitlab
Jun 17, 2026
Apr 17, 2019
N/A· v4
6.5 MEDIUM· v3
5.8 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows CSRF.
CVE-2019-9175
1Gitlab
1Gitlab
Jun 17, 2026
Apr 17, 2019
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure (issue 3 of 5).
CVE-2019-9174
1Gitlab
1Gitlab
Jun 17, 2026
Apr 17, 2019
N/A· v4
10.0 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows SSRF.
CVE-2019-9172
1Gitlab
1Gitlab
Jun 17, 2026
Apr 17, 2019
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure (issue 2 of 5).
CVE-2019-9171
1Gitlab
1Gitlab
Jun 17, 2026
Apr 17, 2019
N/A· v4
3.7 LOW· v3
4.3 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure (issue 1 of 5).
CVE-2019-9170
1Gitlab
1Gitlab
Jun 17, 2026
Apr 17, 2019
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control.
CVE-2019-7155
1Gitlab
1Gitlab
Jun 17, 2026
Apr 16, 2019
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. A user retains their role within a pr...Show more
An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. A user retains their role within a project in a private group after being removed from the group, if their privileges within the project are different from the group.Show less
CVE-2019-6796
1Gitlab
1Gitlab
Jun 17, 2026
Apr 11, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows XSS (issue 2 of 2). The user status field contains a lack of input validation an...Show more
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows XSS (issue 2 of 2). The user status field contains a lack of input validation and output encoding that results in a persistent XSS.Show less
CVE-2018-20229
1Gitlab
1Gitlab
Nov 21, 2024
Apr 4, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
GitLab Community and Enterprise Edition before 11.3.14, 11.4.x before 11.4.12, and 11.5.x before 11.5.5 allows Directory Traversal.
CVE-2018-20144
1Gitlab
1Gitlab
Nov 21, 2024
Mar 28, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
GitLab Community and Enterprise Edition 11.x before 11.3.13, 11.4.x before 11.4.11, and 11.5.x before 11.5.4 has Incorrect Access Control.
CVE-2018-19856
1Gitlab
1Gitlab
Nov 21, 2024
Mar 26, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
GitLab CE/EE before 11.3.12, 11.4.x before 11.4.10, and 11.5.x before 11.5.3 allows Directory Traversal in Templates API.
CVE-2019-6240
1Gitlab
1Gitlab
Jun 17, 2026
Mar 25, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.4. It allows Directory Traversal.
CVE-2018-18843
1Gitlab
1Gitlab
Nov 21, 2024
Dec 4, 2018
N/A· v4
10.0 CRITICAL· v3
7.5 HIGH· v2
The Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9, and 11.4.x before 11.4.4 has SSRF.
CVE-2018-18648
1Gitlab
1Gitlab
Nov 21, 2024
Dec 4, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Information Exposure Through an Error Message.
CVE-2018-18647
1Gitlab
1Gitlab
Nov 21, 2024
Dec 4, 2018
N/A· v4
6.5 MEDIUM· v3
5.5 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Missing Authorization.
CVE-2018-18646
1Gitlab
1Gitlab
Nov 21, 2024
Dec 4, 2018
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It allows SSRF.
CVE-2018-18645
1Gitlab
1Gitlab
Nov 21, 2024
Dec 4, 2018
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It allows for Information Exposure via unsubscribe links in email replies.
CVE-2018-18644
1Gitlab
1Gitlab
Nov 21, 2024
Dec 4, 2018
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It allows Information Exposure via a Gitlab Prometheus integration.
CVE-2018-18642
1Gitlab
1Gitlab
Nov 21, 2024
Dec 4, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has XSS.
CVE-2018-18641
1Gitlab
1Gitlab
Nov 21, 2024
Dec 4, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Cleartext Storage of Sensitive Information.