| CVE-2021-22240 |
Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on…
|
4.2
Medium
|
Aug 5, 2021 |
| CVE-2020-26412 |
Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics…
|
3.1
Low
|
Dec 11, 2020 |
| CVE-2020-26416 |
Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms…
|
4.0
Medium
|
Dec 11, 2020 |
| CVE-2020-13349 |
An issue has been discovered in GitLab EE affecting all versions starting from 8.12
|
4.3
Medium
|
Nov 17, 2020 |
| CVE-2020-13348 |
An issue has been discovered in GitLab EE affecting all versions starting from 10.2
|
5.7
Medium
|
Nov 17, 2020 |
| CVE-2020-26406 |
Certain SAST CiConfiguration information could be viewed by unauthorized users in GitLab EE starting with 13.3
|
5.3
Medium
|
Nov 17, 2020 |
| CVE-2019-15581 |
An IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that…
|
Not rated
|
Jan 28, 2020 |
| CVE-2019-15582 |
An IDOR was discovered in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition…
|
Not rated
|
Jan 28, 2020 |
| CVE-2019-15590 |
An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE) and Enterprise…
|
Not rated
|
Jan 28, 2020 |
| CVE-2019-5474 |
An authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the merge request approval…
|
Not rated
|
Jan 28, 2020 |