921 results · Feed
-
Critical 9.6
In GitLab before 13.0.12, 13.1.6 and 13.2.3, it is possible to bypass E-mail verification which is required for OAuth F…
-
Medium 4.2
In GitLab before 13.0.12, 13.1.6 and 13.2.3, access grants were not revoked when a user revoked access to an applicatio…
-
Medium 6.3
In GitLab before 13.0.12, 13.1.6 and 13.2.3 using a branch with a hexadecimal name could override an existing hash.
-
Medium 6.1
Client-Side code injection through Mermaid markup in GitLab CE/EE 12.9 and later through 13.0.1 allows a specially craf…
-
High 7.5
A security issue allowed achieving Denial of Service attacks through memory exhaustion by uploading malicious artifacts…
-
High 7.4
User is allowed to set an email as a notification email even without verifying the new email in all previous GitLab CE/…
-
High 7.5
Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to …
-
Medium 6.1
A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in the blobs API in all …
-
Unscored —
GitLab 12.6 through 12.9 is vulnerable to a privilege escalation that allows an external user to create a personal snip…
-
Unscored —
GitLab 9.5.9 through 12.9 is vulnerable to stored XSS in an admin notification feature.
-
Unscored —
GitLab 10.8 through 12.9 has a vulnerability that allows someone to mirror a repository even if the feature is not acti…
-
Unscored —
GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects.
-
Unscored —
GitLab EE/CE 8.0.rc1 to 12.9 is vulnerable to a blind SSRF in the FogBugz integration.
-
Unscored —
GitLab through 12.9 is affected by a potential DoS in repository archive download.
-
Unscored —
GitLab 8.10 and later through 12.9 is vulnerable to an SSRF in a project import note feature.
-
Unscored —
GitLab 10.1 through 12.8.1 has Incorrect Access Control. A scenario was discovered in which a GitLab account could be t…
-
Unscored —
GitLab 7.10 through 12.8.1 has Incorrect Access Control. Under certain conditions where users should have been required…
-
Unscored —
GitLab 8.3 through 12.8.1 allows Information Disclosure. It was possible for certain non-members to access the Contribu…
-
Unscored —
GitLab before 12.8.2 has Incorrect Access Control. It was internally discovered that the LFS import process could poten…
-
Unscored —
GitLab before 12.8.2 allows Information Disclosure. Badge images were not being proxied, causing mixed content warnings…
-
Unscored —
An issue was discovered in GitLab Enterprise Edition 8.3 through 12.0.2. The color codes decoder was vulnerable to a re…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 8.3 through 11.11. It allows Information Exposure th…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious user could execute Ja…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. The protected branches feature co…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 6.8 through 11.11. Users could bypass the mandatory …
-
Unscored —
GitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private project to see the merg…
-
Unscored —
An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise …
-
Unscored —
Improper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Ed…
-
Unscored —
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 5.1 through 12.6.1. It has Incorre…
-
Unscored —
GitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access Control (issue 2 of 2).
-
Unscored —
GitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access Control (issue 1 of 2).
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x bef…
-
Unscored —
An improper access control vulnerability exists in Gitlab <v12.3.2, <v12.2.6, <v12.1.12 which would allow a blocked use…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Insecure Permissions.
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Incorrect Access Control.
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the autocomplete feature. It has Inse…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project labels feature. It has In…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF Geolocation data was not be…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 8.1 through 12.2.1. Certain areas displaying Markdow…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Certain account actions needed impro…