Gitlab
gitlab
1,397 CVEs • 11 products
Products (11)
Click to collapseToggle
Products (11)
Click to collapse
CVEs (1,397)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
An issue was discovered in GitLab Community and Enterprise Edition 6.8 through 11.11. Users could bypass the mandatory external authentication provider sign-in restrictions by sending a specially crafted request. It has...Show more |
GitLab 10.7 and later through 12.7.2 has Incorrect Access Control. |
In GitLab Enterprise Edition (EE) 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users. |
Unauthorized Access to the Container Registry of other groups was discovered in GitLab Enterprise 12.0.0-pre. In other words, authenticated remote attackers can read Docker registries of other groups. When a legitimate u...Show more |
GitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of restricted pipelines via the merge request endpoint. |
GitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private project to see the merge request ID associated to an issue via the activity timeline. |
An issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to package and file disclosure via request smuggling. |
GitLab EE 12.6 and later through 12.7.2 allows Denial of Service. |
GitLab EE 8.8 and later through 12.7.2 has Insecure Permissions. |
GitLab EE 12.4 and later through 12.7.2 has Incorrect Access Control. |
GitLab EE 10.1 through 12.7.2 allows Information Disclosure. |
GitLab through 12.7.2 allows XSS. |
GitLab EE 12.2 has Insecure Permissions (issue 2 of 2). |
GitLab EE 11.0 and later through 12.7.2 allows XSS. |
GitLab EE 8.0 and later through 12.7.2 allows Information Disclosure. |
GitLab EE 8.0 through 12.7.2 has Incorrect Access Control. |
GitLab EE 8.0 through 12.7.2 has Insecure Permissions (issue 1 of 2). |
GitLab EE 11.11 and later through 12.7.2 allows Directory Traversal. |
GitLab EE 8.9 and later through 12.7.2 has Insecure Permission |
GitLab EE 8.9 and later through 12.7.2 has Insecure Permission |