Advisories · Technology

GitLab Community and Enterprise Editions.

Every CVE that names GitLab Community and Enterprise Editions among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2017-0920 CVE record

Insecure direct object reference in GitLab Community and Enterprise Editions
- GitLab Community and Enterprise Editions
- Broken access control
Not analysed yet 22 Mar 2018
CVE-2018-3710 CVE record

Insecure temporary file in GitLab Community and Enterprise Editions
- GitLab Community and Enterprise Editions
- CWE-377
Not analysed yet 21 Mar 2018
CVE-2017-0927 CVE record

Improper authorization in GitLab Community and Enterprise Editions
- GitLab Community and Enterprise Editions
- Broken access control
Not analysed yet 21 Mar 2018
CVE-2017-0926 CVE record

Improper authorization in GitLab Community and Enterprise Editions
- GitLab Community and Enterprise Editions
- Broken access control
Not analysed yet 21 Mar 2018
CVE-2017-0925 CVE record

Insufficiently protected credentials in GitLab Community and Enterprise Editions
- GitLab Community and Enterprise Editions
- Hard-coded credentials
Not analysed yet 21 Mar 2018
CVE-2017-0924 CVE record

Cross-site scripting in GitLab Community and Enterprise Editions
- GitLab Community and Enterprise Editions
- Cross-site scripting (XSS)
Not analysed yet 21 Mar 2018
CVE-2017-0923 CVE record

Cross-site scripting in GitLab Community and Enterprise Editions
- GitLab Community and Enterprise Editions
- Cross-site scripting (XSS)
Not analysed yet 21 Mar 2018
CVE-2017-0922 CVE record

Insecure direct object reference in GitLab Community and Enterprise Editions
- GitLab Community and Enterprise Editions
- Broken access control
Not analysed yet 21 Mar 2018
CVE-2017-0918 CVE record

Path traversal in GitLab Community and Enterprise Editions
- GitLab Community and Enterprise Editions
- Path traversal
Not analysed yet 21 Mar 2018
CVE-2017-0917 CVE record

Cross-site scripting in GitLab Community and Enterprise Editions
- GitLab Community and Enterprise Editions
- Cross-site scripting (XSS)
Not analysed yet 21 Mar 2018
CVE-2017-0916 CVE record

Command injection in GitLab Community and Enterprise Editions
- GitLab Community and Enterprise Editions
- Command injection
Not analysed yet 21 Mar 2018
CVE-2017-0915 CVE record

Command injection in GitLab Community and Enterprise Editions
- GitLab Community and Enterprise Editions
- Command injection
Not analysed yet 21 Mar 2018
CVE-2017-0914 CVE record

SQL injection in GitLab Community and Enterprise Editions
- GitLab Community and Enterprise Editions
- SQL injection
Not analysed yet 21 Mar 2018