| CVE-2020-26408 |
A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to =13.5 to =13.6…
|
5.3
Medium
|
Dec 11, 2020 |
| CVE-2020-13357 |
An issue was discovered in Gitlab CE/EE versions >= 13.1 to = 13.5 to = 13.6…
|
4.3
Medium
|
Dec 11, 2020 |
| CVE-2020-26413 |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13.6.2
|
5.3
Medium
|
Dec 11, 2020 |
| CVE-2020-26417 |
Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership
|
5.3
Medium
|
Dec 11, 2020 |
| CVE-2020-26409 |
A DOS vulnerability exists in Gitlab CE/EE >=10.3, =13.5,…
|
4.3
Medium
|
Dec 11, 2020 |
| CVE-2020-26407 |
A XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6 before 13.6.2 that…
|
5.5
Medium
|
Dec 10, 2020 |
| CVE-2020-13359 |
The Terraform API in GitLab CE/EE 12.10+ exposed the object storage signed URL on the delete operation allowing a…
|
7.6
High
|
Nov 18, 2020 |
| CVE-2020-13356 |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.8.9
|
8.2
High
|
Nov 18, 2020 |
| CVE-2020-13355 |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14
|
7.5
High
|
Nov 18, 2020 |
| CVE-2020-26405 |
Path traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8 allows an attacker to…
|
7.1
High
|
Nov 17, 2020 |
| CVE-2020-13350 |
CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able to target GitLab…
|
3.1
Low
|
Nov 17, 2020 |
| CVE-2020-13351 |
Insufficient permission checks in scheduled pipeline API in GitLab CE/EE 13.0+ allows an attacker to read variable names…
|
6.5
Medium
|
Nov 17, 2020 |
| CVE-2020-13354 |
A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 12.6
|
4.3
Medium
|
Nov 17, 2020 |
| CVE-2020-13352 |
Private group info is leaked leaked in GitLab CE/EE version 10.2 and above, when the project is moved from private to…
|
3.7
Low
|
Nov 17, 2020 |
| CVE-2020-13358 |
A vulnerability in the internal Kubernetes agent api in GitLab CE/EE version 13.3 and above allows unauthorized access…
|
4.7
Medium
|
Nov 17, 2020 |
| CVE-2019-15578 |
An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise…
|
Not rated
|
Jan 28, 2020 |
| CVE-2019-15579 |
An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise…
|
Not rated
|
Jan 28, 2020 |
| CVE-2019-5465 |
An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which…
|
Not rated
|
Jan 28, 2020 |
| CVE-2019-15583 |
An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise…
|
Not rated
|
Jan 28, 2020 |
| CVE-2019-5464 |
A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which…
|
Not rated
|
Jan 28, 2020 |
| CVE-2019-15585 |
Improper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise…
|
Not rated
|
Jan 28, 2020 |
| CVE-2019-15586 |
A XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin
|
Not rated
|
Jan 28, 2020 |