Advisories · Technology
GitLab.
Every CVE that names GitLab among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
GitLab: For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to…
- GitLab
- CVSS 7.3 High
GitLab: For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting (XSS) vulnerability…
- GitLab
- CVSS 7.3 High
GitLab: For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in…
- GitLab
- CVSS 3.1 Low
GitLab: For GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs…
- GitLab
- CVSS 7.5 High
GitLab: In GitLab before 13.0.12, 13.1.6, and 13.2.3…
- GitLab
- CVSS 8.1 High
In GitLab before 13.2.3, project sharing could temporarily allow too permissive access.
- GitLab
- CVSS 5.5 Medium
GitLab: In GitLab before 13.0.12, 13.1.6, and 13.2.3…
- GitLab
- CVSS 9.6 CriticalCritical · CVSS 9+
GitLab: In GitLab before 13.0.12, 13.1.6 and 13.2.3…
- GitLab
- CVSS 4.2 Medium
GitLab: In GitLab before 13.0.12, 13.1.6 and 13.2.3…
- GitLab
- CVSS 6.3 Medium
GitLab: In GitLab before 13.0.12, 13.1.6 and 13.2.3 using a branch with a hexadecimal name could…
- GitLab
- CVSS 7.5 High
GitLab: An authorization issue relating to project maintainer impersonation was identified in…
- GitLab
- CVSS 5.3 Medium
GitLab: Kubernetes cluster token disclosure in GitLab CE/EE 10.3 and later through 13.0.1 allows…
- GitLab
- CVSS 5.3 Medium
GitLab: Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows…
- GitLab
- CVSS 6.1 Medium
GitLab: Client-Side code injection through Mermaid markup in GitLab CE/EE 12.9 and later through…
- GitLab
- CVSS 8.0 High
GitLab: A user with an unverified email address could request an access to domain restricted…
- GitLab
- CVSS 7.5 High
GitLab: A security issue allowed achieving Denial of Service attacks through memory exhaustion by…
- GitLab
- CVSS 7.5 High
GitLab: A Denial of Service vulnerability allowed exhausting the system resources in GitLab CE/EE…
- GitLab
- CVSS 4.3 Medium
GitLab: User email verification bypass in GitLab CE/EE 12.5 and later through 13.0.1 allows user…
- GitLab
- CVSS 7.5 High
OAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user to use OAuth authorization code flow
- GitLab
- CVSS 7.4 High
GitLab: User is allowed to set an email as a notification email even without verifying the new…
- GitLab
- CVSS 6.3 Medium
GitLab: An authorization issue in the mirroring logic allowed read access to private repositories…
- GitLab
- CVSS 6.1 Medium
GitLab: A Reflected Cross-Site Scripting vulnerability allowed the execution of arbitrary…
- GitLab
- CVSS 7.5 High
GitLab: Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through…
- GitLab
- CVSS 5.3 Medium
GitLab: A specially crafted request could be used to confirm the existence of files hosted on…
- GitLab
- CVSS 6.1 Medium
GitLab: A Stored Cross-Site Scripting vulnerability allowed the execution on Javascript payloads…
- GitLab
- CVSS 6.1 Medium
GitLab: A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript…
- GitLab
- CVSS 4.3 Medium
GitLab: Insecure authorization in Project Deploy Keys in GitLab CE/EE 12.8 and later through…
- GitLab
-
Information disclosure in GitLab
- GitLab
- Information disclosure
-
Information disclosure in GitLab
- GitLab
- Information disclosure
-
GitLab: The (1) create_branch, (2) create_tag, (3) import_project…
- GitLab
- GitLab Community Edition
-
GitLab: The parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2…
- GitLab
- GitLab Community Edition
-
Uncontrolled resource consumption in GitLab
- GitLab
- Denial of service
-
Information disclosure in GitLab
- GitLab
- Information disclosure
-
Insecure direct object reference in GitLab
- GitLab
- Broken access control
-
Improper access control in GitLab
- GitLab
- Broken access control
-
Uncontrolled resource consumption in GitLab
- GitLab
- Denial of service
-
Cross-site scripting in GitLab
- GitLab
- Cross-site scripting (XSS)