← Back

Gitlab

gitlab

1,511 CVEs • 11 products

Products (11)

Click to collapse
Toggle
Gitlab
gitlab
Gitlab Shell
gitlab-shell
Runner
runner
Omnibus
omnibus
Gitaly
gitaly
Gitlab Runner
gitlab_runner
\

CVEs (1,511)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Gitlab
1Gitlab
Jun 17, 2026
Jan 3, 2020
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
Gitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 2 of 2).
1Gitlab
1Gitlab
Jun 17, 2026
Jan 3, 2020
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
Gitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 1 of 2).
1Gitlab
1Gitlab
Nov 21, 2024
Dec 30, 2019
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An issue was discovered in GitLab Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control.
1Gitlab
1Gitlab
Nov 21, 2024
Dec 30, 2019
N/A· v4
6.3 MEDIUM· v3
6.5 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control.
1Gitlab
1Gitlab
Nov 21, 2024
Dec 30, 2019
N/A· v4
7.2 HIGH· v3
6.4 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows SSRF.
1Gitlab
1Gitlab
Nov 21, 2024
Dec 30, 2019
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control.
1Gitlab
1Gitlab
Nov 21, 2024
Dec 30, 2019
N/A· v4
5.0 MEDIUM· v3
4.0 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows SSRF.
1Gitlab
1Gitlab
Nov 21, 2024
Dec 30, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
An issue was discovered in GitLab Community and Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS.
1Gitlab
1Gitlab
Nov 21, 2024
Dec 30, 2019
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition 11.3.x and 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows Information Exposure.
1Gitlab
1Gitlab
Nov 21, 2024
Dec 30, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control.
1Gitlab
1Gitlab
Nov 21, 2024
Dec 30, 2019
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control.
1Gitlab
1Gitlab
Nov 21, 2024
Dec 30, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
An issue was discovered in GitLab Enterprise Edition 11.3.x and 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS.
1Gitlab
1Gitlab
Nov 21, 2024
Dec 30, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
An issue was discovered in GitLab Community and Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS.
1Gitlab
1Gitlab
Nov 21, 2024
Dec 30, 2019
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control.
1Gitlab
1Gitlab
Nov 21, 2024
Dec 30, 2019
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows Information Exposure.
1Gitlab
1Gitlab
Nov 21, 2024
Dec 26, 2019
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control (issue 2 of 6).
1Gitlab
1Gitlab
Jun 17, 2026
Dec 20, 2019
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A denial of service exists in gitlab <v12.3.2, <v12.2.6, and <v12.1.10 that would let an attacker bypass input validation in markdown fields take down the affected page.
1Gitlab
1Gitlab
Jun 17, 2026
Dec 18, 2019
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An improper access control vulnerability exists in Gitlab EE <v12.3.3, <v12.2.7, & <v12.1.13 that allowed the group search feature with Elasticsearch to return private code, merge requests and commits.
1Gitlab
1Gitlab
Jun 17, 2026
Dec 18, 2019
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
A authentication bypass vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.10 in the Salesforce login integration that could be used by an attacker to create an account that bypassed domain restrictions...Show more
A authentication bypass vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.10 in the Salesforce login integration that could be used by an attacker to create an account that bypassed domain restrictions and email verification requirements.Show less
1Gitlab
1Gitlab
Jun 17, 2026
Dec 18, 2019
N/A· v4
6.5 MEDIUM· v3
5.5 MEDIUM· v2
An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading files from project archive to replace other users files potentially allowing an attacker to replace project binaries or othe...Show more
An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading files from project archive to replace other users files potentially allowing an attacker to replace project binaries or other uploaded assets.Show less