Gitlab

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-14601 1Gitlab 1Gitlab Nov 21, 2024 Jul 27, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.2. A Denial of Service can occur because Markdown rendering times are slow.
CVE-2018-14364 1Gitlab 1Gitlab Nov 21, 2024 Jul 18, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and resultant remote code execution via the GitLab projects import componen...Show more GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and resultant remote code execution via the GitLab projects import component.Show less
CVE-2017-0921 1Gitlab 1Gitlab Nov 21, 2024 Jul 3, 2018 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victim's...Show more GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victim's session is compromised.Show less
CVE-2017-0919 1Gitlab 1Gitlab Nov 21, 2024 Jul 3, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the GitLab import component resulting in an attacker being able to perform operations under a...Show more GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the GitLab import component resulting in an attacker being able to perform operations under a group in which they were previously unauthorized.Show less
CVE-2018-10379 1Gitlab 1Gitlab Nov 21, 2024 May 31, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 10.5.8, 10.6.x before 10.6.5, and 10.7.x before 10.7.2. The Move Issue feature contained a persistent XSS vulnerability.
CVE-2018-8801 1Gitlab 1Gitlab Jun 17, 2026 Apr 25, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 GitLab Community and Enterprise Editions version 8.3 up to 10.x before 10.3 are vulnerable to SSRF in the Services and webhooks component.
CVE-2018-9244 1Gitlab 1Gitlab Jun 17, 2026 Apr 5, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 GitLab Community and Enterprise Editions version 9.2 up to 10.4 are vulnerable to XSS because a lack of input validation in the milestones component leads to cross site scripting (specifically, data-milestone-id in the m...Show more GitLab Community and Enterprise Editions version 9.2 up to 10.4 are vulnerable to XSS because a lack of input validation in the milestones component leads to cross site scripting (specifically, data-milestone-id in the milestone dropdown feature). This is fixed in 10.6.3, 10.5.7, and 10.4.7.Show less
CVE-2018-9243 1Gitlab 1Gitlab Jun 17, 2026 Apr 5, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 GitLab Community and Enterprise Editions version 8.4 up to 10.4 are vulnerable to XSS because a lack of input validation in the merge request component leads to cross site scripting (specifically, filenames in changes ta...Show more GitLab Community and Enterprise Editions version 8.4 up to 10.4 are vulnerable to XSS because a lack of input validation in the merge request component leads to cross site scripting (specifically, filenames in changes tabs of merge requests). This is fixed in 10.6.3, 10.5.7, and 10.4.7.Show less
CVE-2018-8971 2Debian Gitlab 2Debian Linux Gitlab Jun 17, 2026 Mar 24, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The Auth0 integration in GitLab before 10.3.9, 10.4.x before 10.4.6, and 10.5.x before 10.5.6 has an incorrect omniauth-auth0 configuration, leading to signing in unintended users.
CVE-2017-0920 1Gitlab 1Gitlab Nov 21, 2024 Mar 22, 2018 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the Projects::MergeRequests::CreationsController component resulting in an attacker to see eve...Show more GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the Projects::MergeRequests::CreationsController component resulting in an attacker to see every project name and their respective namespace on a GitLab instance.Show less
CVE-2018-3710 2Debian Gitlab 2Debian Linux Gitlab Nov 21, 2024 Mar 21, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execution.
CVE-2017-0927 1Gitlab 1Gitlab Nov 21, 2024 Mar 21, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users.
CVE-2017-0926 2Debian Gitlab 2Debian Linux Gitlab Nov 21, 2024 Mar 21, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component resulting in unauthorized user login.
CVE-2017-0925 2Debian Gitlab 2Debian Linux Gitlab Nov 21, 2024 Mar 21, 2018 N/A· v4 7.2 HIGH· v3 4.0 MEDIUM· v2 Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password.
CVE-2017-0924 1Gitlab 1Gitlab Nov 21, 2024 Mar 21, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scripting.
CVE-2017-0923 1Gitlab 1Gitlab Nov 21, 2024 Mar 21, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site scripting.
CVE-2017-0922 1Gitlab 1Gitlab Nov 21, 2024 Mar 21, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Gitlab Enterprise Edition version 10.3 is vulnerable to an authorization bypass issue in the GitLab Projects::BoardsController component resulting in an information disclosure on any board object.
CVE-2017-0918 2Debian Gitlab 2Debian Linux Gitlab Nov 21, 2024 Mar 21, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution.
CVE-2017-0917 2Debian Gitlab 2Debian Linux Gitlab Nov 21, 2024 Mar 21, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in persistent cross site scripting.
CVE-2017-0916 2Debian Gitlab 2Debian Linux Gitlab Nov 21, 2024 Mar 21, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the system_hook_push queue through web hook component resulting in remote code execution.

Previous 1...69 70 717273 Next