Advisories · Technology

GitLab.

Every CVE that names GitLab among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-39901 CVE record

CVSS 2.7 Low

GitLab: In all versions of GitLab CE/EE since version 11.10…
- GitLab
Not analysed yet 4 Nov 2021
CVE-2021-39913 CVE record

CVSS 4.4 Medium

GitLab: Accidental logging of system root password in the migration log in all versions of GitLab…
- GitLab
Not analysed yet 4 Nov 2021
CVE-2021-39897 CVE record

CVSS 2.6 Low

GitLab: Improper access control in GitLab CE/EE version 10.5 and above allowed subgroup members…
- GitLab
Not analysed yet 4 Nov 2021
CVE-2021-39912 CVE record

CVSS 5.3 Medium

A potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7.
- GitLab
Not analysed yet 4 Nov 2021
CVE-2021-39906 CVE record

CVSS 8.7 HighCritical · CVSS 7+ and EPSS

GitLab: Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an…
- GitLab
Not analysed yet 4 Nov 2021
CVE-2021-39909 CVE record

CVSS 5.3 Medium

GitLab: Lack of email address ownership verification in the CODEOWNERS feature in all versions of…
- GitLab
Not analysed yet 4 Nov 2021
CVE-2021-39903 CVE record

CVSS 6.5 Medium

GitLab: In all versions of GitLab CE/EE since version 13.0, a privileged user…
- GitLab
Not analysed yet 4 Nov 2021
CVE-2021-39902 CVE record

CVSS 4.3 Medium

GitLab: Incorrect Authorization in GitLab CE/EE 13.4 or above allows a user with guest membership…
- GitLab
Not analysed yet 4 Nov 2021
CVE-2021-39914 CVE record

CVSS 3.1 Low

GitLab: A regular expression denial of service issue in GitLab versions 8.13 to 14.2.5…
- GitLab
Not analysed yet 4 Nov 2021
CVE-2021-22263 CVE record

CVSS 5.5 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 13.0 before…
- GitLab
Not analysed yet 11 Oct 2021
CVE-2021-22261 CVE record

CVSS 7.3 High

GitLab: A stored Cross-Site Scripting vulnerability in the Jira integration in all GitLab…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-22258 CVE record

CVSS 4.3 Medium

GitLab: The project import/export feature in GitLab 8.9 and greater could be used to obtain…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-22262 CVE record

CVSS 5.4 Medium

GitLab: Missing access control in all GitLab versions starting from 13.12 before 14.0.9…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-22257 CVE record

CVSS 5.3 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 14.0 before…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-22264 CVE record

CVSS 6.8 Medium

GitLab: An issue has been discovered in GitLab affecting all versions starting from 13.8 before…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-39889 CVE record

CVSS 4.3 Medium

GitLab: In all versions of GitLab EE since version 14.1…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-39870 CVE record

CVSS 4.3 Medium

GitLab: In all versions of GitLab CE/EE since version 11.11…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-39881 CVE record

CVSS 3.5 Low

GitLab: In all versions of GitLab CE/EE since version 7.7…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-39886 CVE record

CVSS 2.6 Low

GitLab: Permissions rules were not applied while issues were moved between projects of the same…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-39891 CVE record

CVSS 5.9 Medium

GitLab: In all versions of GitLab CE/EE since version 8.0…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-39866 CVE record

CVSS 5.4 Medium

GitLab: A business logic error in the project deletion process in GitLab 13.6 and later allows…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-39872 CVE record

CVSS 6.5 Medium

GitLab: In all versions of GitLab CE/EE since version 14.1…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-39894 CVE record

CVSS 5.4 Medium

GitLab: In all versions of GitLab CE/EE since version 8.0…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-39869 CVE record

CVSS 6.5 Medium

GitLab: In all versions of GitLab CE/EE since version 8.9…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-39867 CVE record

CVSS 6.5 Medium

GitLab: In all versions of GitLab CE/EE since version 8.15…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-39875 CVE record

CVSS 5.3 Medium

GitLab: In all versions of GitLab CE/EE since version 13.6…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-39884 CVE record

CVSS 4.3 Medium

GitLab: In all versions of GitLab EE since version 8.13…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-39882 CVE record

CVSS 5.3 Medium

GitLab: In all versions of GitLab CE/EE, provided a user ID…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-39888 CVE record

CVSS 4.3 Medium

GitLab: In all versions of GitLab EE starting from 13.10 before 14.1.7…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-39893 CVE record

CVSS 5.3 Medium

GitLab: A potential DOS vulnerability was discovered in GitLab starting with version 9.1 that…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-39878 CVE record

CVSS 5.8 Medium

GitLab: A stored Reflected Cross-Site Scripting vulnerability in the Jira integration in GitLab…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-39887 CVE record

CVSS 7.3 High

GitLab: A stored Cross-Site Scripting vulnerability in the GitLab Flavored Markdown in GitLab…
- GitLab
Not analysed yet 5 Oct 2021
CVE-2021-39868 CVE record

CVSS 4.3 Medium

GitLab: In all versions of GitLab CE/EE since version 8.12…
- GitLab
Not analysed yet 4 Oct 2021
CVE-2021-22259 CVE record

CVSS 4.3 Medium

GitLab: A potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due…
- GitLab
Not analysed yet 4 Oct 2021
CVE-2021-39874 CVE record

CVSS 4.3 Medium

GitLab: In all versions of GitLab CE/EE since version 11.0…
- GitLab
Not analysed yet 4 Oct 2021
CVE-2021-39883 CVE record

CVSS 4.3 Medium

GitLab: Improper authorization checks in all versions of GitLab EE starting from 13.11 before…
- GitLab
Not analysed yet 4 Oct 2021
CVE-2021-39871 CVE record

CVSS 4.3 Medium

GitLab: In all versions of GitLab CE/EE since version 13.0…
- GitLab
Not analysed yet 4 Oct 2021
CVE-2021-39899 CVE record

CVSS 2.9 Low

GitLab: In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may…
- GitLab
Not analysed yet 4 Oct 2021
CVE-2021-39900 CVE record

CVSS 2.0 Low

GitLab: Information disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of…
- GitLab
Not analysed yet 4 Oct 2021
CVE-2021-39896 CVE record

CVSS 3.8 Low

GitLab: In all versions of GitLab CE/EE since version 8.0…
- GitLab
Not analysed yet 4 Oct 2021
CVE-2021-39873 CVE record

CVSS 4.3 Medium

GitLab: In all versions of GitLab CE/EE, there exists a content spoofing vulnerability which may…
- GitLab
Not analysed yet 4 Oct 2021
CVE-2021-39879 CVE record

CVSS 2.2 Low

GitLab: Missing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an…
- GitLab
Not analysed yet 4 Oct 2021
CVE-2021-39877 CVE record

CVSS 7.7 High

GitLab: A vulnerability was discovered in GitLab starting with version 12.2 that allows an…
- GitLab
Not analysed yet 4 Oct 2021
CVE-2021-39885 CVE record

CVSS 8.7 High

GitLab: A Stored XSS in merge request creation page in all versions of Gitlab EE starting from…
- GitLab
Not analysed yet 4 Oct 2021
CVE-2021-22239 CVE record

CVSS 5.0 Medium

GitLab: An unauthorized user was able to insert metadata when creating new issue on GitLab CE/EE…
- GitLab
Not analysed yet 9 Sept 2021
CVE-2021-22236 CVE record

CVSS 5.5 Medium

GitLab: Due to improper handling of OAuth client IDs…
- GitLab
Not analysed yet 25 Aug 2021
CVE-2021-22242 CVE record

CVSS 8.7 HighCritical · CVSS 7+ and EPSS

GitLab: Insufficient input sanitization in Mermaid markdown in GitLab CE/EE version 11.4 and up…
- GitLab
Not analysed yet 25 Aug 2021
CVE-2021-22237 CVE record

CVSS 6.6 Medium

GitLab: Under specialized conditions, GitLab may allow a user with an impersonation token to…
- GitLab
Not analysed yet 25 Aug 2021
CVE-2021-22243 CVE record

CVSS 5.0 Medium

GitLab: Under specialized conditions, GitLab CE/EE versions starting 7.10 may allow existing…
- GitLab
Not analysed yet 25 Aug 2021
CVE-2021-22244 CVE record

CVSS 3.1 Low

GitLab: Improper authorization in the vulnerability report feature in GitLab EE affecting all…
- GitLab
Not analysed yet 25 Aug 2021
CVE-2021-22247 CVE record

CVSS 4.3 Medium

GitLab: Improper authorization in GitLab CE/EE affecting all versions since 13.0 allows guests in…
- GitLab
Not analysed yet 25 Aug 2021
CVE-2021-22245 CVE record

CVSS 2.7 Low

GitLab: Improper validation of commit author in GitLab CE/EE affecting all versions allowed an…
- GitLab
Not analysed yet 25 Aug 2021
CVE-2021-22256 CVE record

CVSS 5.4 Medium

GitLab: Improper authorization in GitLab CE/EE affecting all versions since 12.6 allowed guest…
- GitLab
Not analysed yet 25 Aug 2021
CVE-2021-22250 CVE record

CVSS 5.4 Medium

GitLab: Improper authorization in GitLab CE/EE affecting all versions since 13.3 allowed users to…
- GitLab
Not analysed yet 25 Aug 2021
CVE-2021-22249 CVE record

CVSS 4.3 Medium

GitLab: A verbose error message in GitLab EE affecting all versions since 12.2 could disclose the…
- GitLab
Not analysed yet 23 Aug 2021
CVE-2021-22248 CVE record

CVSS 5.3 Medium

GitLab: Improper authorization on the pipelines page in GitLab CE/EE affecting all versions since…
- GitLab
Not analysed yet 23 Aug 2021
CVE-2021-22251 CVE record

CVSS 4.3 Medium

GitLab: Improper validation of invited users' email address in GitLab EE affecting all versions…
- GitLab
Not analysed yet 23 Aug 2021
CVE-2021-22252 CVE record

CVSS 6.5 Medium

GitLab: A confusion between tag and branch names in GitLab CE/EE affecting all versions since…
- GitLab
Not analysed yet 23 Aug 2021
CVE-2021-22253 CVE record

CVSS 4.9 Medium

GitLab: Improper authorization in GitLab EE affecting all versions since 13.4 allowed a user who…
- GitLab
Not analysed yet 23 Aug 2021
CVE-2021-22238 CVE record

CVSS 6.8 Medium

An issue has been discovered in GitLab affecting all versions starting with 13.3.
- GitLab
Not analysed yet 20 Aug 2021