Advisories · Technology

GitLab.

Every CVE that names GitLab among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-22166 CVE record

CVSS 5.3 Medium

GitLab: An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP…
- GitLab
Not analysed yet 15 Jan 2021
CVE-2021-22167 CVE record

CVSS 5.3 Medium

An issue has been discovered in GitLab affecting all versions starting from 12.1.
- GitLab
Not analysed yet 15 Jan 2021
CVE-2021-22171 CVE record

CVSS 7.3 High

GitLab: Insufficient validation of authentication parameters in GitLab Pages for GitLab 11.5+…
- GitLab
Not analysed yet 15 Jan 2021
CVE-2021-22168 CVE record

CVSS 4.3 Medium

GitLab: A regular expression denial of service issue has been discovered in NuGet API affecting…
- GitLab
Not analysed yet 15 Jan 2021
CVE-2020-26411 CVE record

CVSS 4.3 Medium

GitLab: A potential DOS vulnerability was discovered in all versions of Gitlab starting from…
- GitLab
Not analysed yet 11 Dec 2020
CVE-2020-26415 CVE record

CVSS 4.3 Medium

GitLab: Information about the starred projects for private user profiles was exposed via the…
- GitLab
Not analysed yet 11 Dec 2020
CVE-2020-13341 CVE record

CVSS 4.9 Medium

An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2.
- GitLab
Not analysed yet 12 Oct 2020
CVE-2020-13339 CVE record

CVSS 5.5 Medium

GitLab: An issue has been discovered in GitLab affecting all versions before 13.2.10…
- GitLab
Not analysed yet 8 Oct 2020
CVE-2020-13340 CVE record

CVSS 8.7 HighCritical · CVSS 7+ and EPSS

GitLab: An issue has been discovered in GitLab affecting all versions prior to 13.2.10…
- GitLab
Not analysed yet 8 Oct 2020
CVE-2020-13344 CVE record

CVSS 5.7 Medium

An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2.
- GitLab
Not analysed yet 8 Oct 2020
CVE-2020-13342 CVE record

CVSS 2.7 Low

GitLab: An issue has been discovered in GitLab affecting versions prior to 13.2.10…
- GitLab
Not analysed yet 7 Oct 2020
CVE-2020-13346 CVE record

CVSS 6.5 Medium

GitLab: Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to…
- GitLab
Not analysed yet 7 Oct 2020
CVE-2020-13334 CVE record

CVSS 5.9 Medium

GitLab: In GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2…
- GitLab
Not analysed yet 7 Oct 2020
CVE-2020-13335 CVE record

CVSS 4.3 Medium

GitLab: Improper group membership validation when deleting a user account in GitLab >=7.12 allows…
- GitLab
Not analysed yet 7 Oct 2020
CVE-2020-13333 CVE record

CVSS 4.3 Medium

A potential DOS vulnerability was discovered in GitLab versions 13.1, 13.2 and 13.3.
- GitLab
Not analysed yet 6 Oct 2020
CVE-2020-13345 CVE record

CVSS 5.5 Medium

An issue has been discovered in GitLab affecting all versions starting from 10.8.
- GitLab
Not analysed yet 6 Oct 2020
CVE-2020-13343 CVE record

CVSS 7.5 High

An issue has been discovered in GitLab affecting all versions starting from 11.2.
- GitLab
Not analysed yet 6 Oct 2020
CVE-2020-13338 CVE record

CVSS 5.4 Medium

An issue has been discovered in GitLab affecting versions prior to 12.10.13, 13.0.8, 13.1.2.
- GitLab
Not analysed yet 2 Oct 2020
CVE-2020-13337 CVE record

CVSS 7.2 High

GitLab: An issue has been discovered in GitLab affecting versions from 12.10 to 12.10.12 that…
- GitLab
Not analysed yet 2 Oct 2020
CVE-2020-13336 CVE record

CVSS 4.0 Medium

An issue has been discovered in GitLab affecting versions from 11.8 before 12.10.13.
- GitLab
Not analysed yet 30 Sept 2020
CVE-2020-13326 CVE record

CVSS 4.3 Medium

A vulnerability was discovered in GitLab versions prior to 13.1.
- GitLab
Not analysed yet 29 Sept 2020
CVE-2020-13321 CVE record

CVSS 8.3 High

A vulnerability was discovered in GitLab versions prior to 13.1.
- GitLab
Not analysed yet 29 Sept 2020
CVE-2020-13324 CVE record

CVSS 6.5 Medium

A vulnerability was discovered in GitLab versions prior to 13.1.
- GitLab
Not analysed yet 29 Sept 2020
CVE-2020-13325 CVE record

CVSS 7.1 High

A vulnerability was discovered in GitLab versions prior 13.1.
- GitLab
Not analysed yet 29 Sept 2020
CVE-2020-13323 CVE record

CVSS 7.7 High

A vulnerability was discovered in GitLab versions prior 13.1.
- GitLab
Not analysed yet 29 Sept 2020
CVE-2020-13331 CVE record

CVSS 5.4 Medium

An issue has been discovered in GitLab affecting versions prior to 12.10.13.
- GitLab
Not analysed yet 29 Sept 2020
CVE-2020-13330 CVE record

CVSS 4.4 Medium

An issue has been discovered in GitLab affecting versions prior to 12.10.13.
- GitLab
Not analysed yet 29 Sept 2020
CVE-2020-13329 CVE record

CVSS 6.5 Medium

An issue has been discovered in GitLab affecting versions from 12.6.2 prior to 12.10.13.
- GitLab
Not analysed yet 29 Sept 2020
CVE-2020-13328 CVE record

CVSS 4.8 Medium

An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13.
- GitLab
Not analysed yet 29 Sept 2020
CVE-2020-13320 CVE record

CVSS 6.5 Medium

GitLab: An issue has been discovered in GitLab before version 12.10.13 that allowed a project…
- GitLab
Not analysed yet 29 Sept 2020
CVE-2020-13322 CVE record

CVSS 7.2 High

A vulnerability was discovered in GitLab versions after 12.9.
- GitLab
Not analysed yet 29 Sept 2020
CVE-2020-13319 CVE record

CVSS 4.3 Medium

An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13.
- GitLab
Not analysed yet 29 Sept 2020
CVE-2020-13296 CVE record

CVSS 6.5 Medium

GitLab: An issue has been discovered in GitLab affecting versions >=10.7 <13.0.14…
- GitLab
Not analysed yet 29 Sept 2020
CVE-2020-13307 CVE record

CVSS 3.8 Low

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 15 Sept 2020
CVE-2020-13308 CVE record

CVSS 2.7 Low

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 15 Sept 2020
CVE-2020-13303 CVE record

CVSS 7.1 High

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 15 Sept 2020
CVE-2020-13298 CVE record

CVSS 7.2 High

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13305 CVE record

CVSS 3.5 Low

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13309 CVE record

CVSS 5.4 Medium

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13310 CVE record

CVSS 6.5 Medium

A vulnerability was discovered in GitLab runner versions before 13.1.3, 13.2.3 and 13.3.1.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13315 CVE record

CVSS 3.7 Low

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13306 CVE record

CVSS 3.7 Low

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13301 CVE record

CVSS 5.5 Medium

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13302 CVE record

CVSS 3.8 Low

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13297 CVE record

CVSS 3.8 Low

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13304 CVE record

CVSS 3.8 Low

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13314 CVE record

CVSS 3.7 Low

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13311 CVE record

CVSS 4.3 Medium

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13312 CVE record

CVSS 6.5 Medium

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13313 CVE record

CVSS 4.3 Medium

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13317 CVE record

CVSS 6.5 Medium

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8, and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13318 CVE record

CVSS 6.4 Medium

A vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13284 CVE record

CVSS 6.5 Medium

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13289 CVE record

CVSS 5.4 Medium

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13287 CVE record

CVSS 4.3 Medium

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13316 CVE record

CVSS 5.4 Medium

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13299 CVE record

CVSS 8.1 High

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13300 CVE record

CVSS 8.0 High

GitLab: GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth authorization scope…
- GitLab
Not analysed yet 14 Sept 2020
CVE-2020-13286 CVE record

CVSS 6.4 Medium

GitLab: For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can…
- GitLab
Not analysed yet 13 Aug 2020
CVE-2020-13281 CVE record

CVSS 6.5 Medium

For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature
- GitLab
Not analysed yet 13 Aug 2020