gitlab vulnerabilities (Bitnami)
1,195 vulnerabilities.
gitlabBitnamiGitLab EE/CE 9.0 to 12.9 allows a maintainer to modify other maintainers' pipeline trigger...4.3 MediumgitlabBitnamiGitLab EE/CE 8.11 through 12.9.1 allows blocked users to pull/push docker images.6.5 MediumgitlabBitnamiIn GitLab EE 11.7 through 12.9, the NPM feature is vulnerable to a path traversal issue.7.5 HighgitlabBitnamiGitLab through 12.9 is affected by a potential DoS in repository archive download.7.5 HighgitlabBitnamiGitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that...6.5 MediumgitlabBitnamiGitLab 8.10 and later through 12.9 is vulnerable to an SSRF in a project import note feature.9.8 CriticalgitlabBitnamiGitLab EE 12.4.2 through 12.8.1 allows Denial of Service. It was internally discovered that a...7.5 HighgitlabBitnamiGitLab 10.1 through 12.8.1 has Incorrect Access Control. A scenario was discovered in which a...9.8 CriticalgitlabBitnamiGitLab 12.5 through 12.8.1 allows HTML Injection. A particular error header was potentially...6.1 MediumgitlabBitnamiGitLab 12.1 through 12.8.1 allows XSS. A stored cross-site scripting vulnerability was discovered...6.1 MediumgitlabBitnamiGitLab EE 3.0 through 12.8.1 allows SSRF. An internal investigation revealed that a particular...9.8 CriticalgitlabBitnamiGitLab 12.1 through 12.8.1 allows XSS. The merge request submission form was determined to have a...6.1 MediumgitlabBitnamiGitLab 7.10 through 12.8.1 has Incorrect Access Control. Under certain conditions where users...5.3 MediumgitlabBitnamiGitLab 8.3 through 12.8.1 allows Information Disclosure. It was possible for certain non-members...5.3 MediumgitlabBitnamiGitLab before 12.8.2 has Incorrect Access Control. It was internally discovered that the LFS...6.5 MediumgitlabBitnamiGitLab 12.2 through 12.8.1 allows Denial of Service. A denial of service vulnerability impacting...5.3 MediumgitlabBitnamiGitLab 12.7 through 12.8.1 has Insecure Permissions. Under certain conditions involving groups,...9.1 CriticalgitlabBitnamiGitLab EE 11.6 through 12.8.1 allows Information Disclosure. Sending a specially crafted request...5.3 MediumgitlabBitnamiGitLab 12.3.5 through 12.8.1 allows Information Disclosure. A particular view was exposing merge...5.3 MediumgitlabBitnamiGitLab 10.4 through 12.8.1 allows Directory Traversal. A particular endpoint was vulnerable to a...5.3 MediumgitlabBitnamiGitLab before 12.8.2 allows Information Disclosure. Badge images were not being proxied, causing...7.5 HighgitlabBitnamiGitLab 12.5 through 12.8.1 has Insecure Permissions. Depending on particular group settings, it...8.1 HighgitlabBitnamiGitLab 8.11 through 12.8.1 allows a Denial of Service when using several features to recursively...7.5 HighgitlabBitnamiGitLab 11.7 through 12.8.1 allows Information Disclosure. Under certain group conditions, group...5.3 MediumgitlabBitnamiGitLab 9.3 through 12.8.1 allows XSS. A cross-site scripting vulnerability was found when viewing...6.1 MediumgitlabBitnamiGitLab 12.1 through 12.8.1 allows XSS. A cross-site scripting vulnerability was present in a...6.1 MediumgitlabBitnamiGitLab 12.8.x before 12.8.6, when sign-up is enabled, allows remote attackers to bypass email...5.3 MediumgitlabBitnamiGitLab 10.7 and later through 12.7.2 has Incorrect Access Control.9.8 CriticalgitlabBitnamiIn GitLab Enterprise Edition (EE) 12.5.0 through 12.7.5, sharing a group with a group could grant...7.5 HighgitlabBitnamiAn issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to...7.5 HighgitlabBitnamiGitLab EE 11.11 and later through 12.7.2 allows Directory Traversal.7.5 HighgitlabBitnamiGitLab EE 8.0 through 12.7.2 has Insecure Permissions (issue 1 of 2).4.3 MediumgitlabBitnamiGitLab EE 8.0 through 12.7.2 has Incorrect Access Control.7.5 HighgitlabBitnamiGitLab EE 8.0 and later through 12.7.2 allows Information Disclosure.7.5 HighgitlabBitnamiGitLab EE 11.0 and later through 12.7.2 allows XSS.6.1 MediumgitlabBitnamiGitLab EE 12.2 has Insecure Permissions (issue 2 of 2).7.5 HighgitlabBitnamiGitLab through 12.7.2 allows XSS.6.1 MediumgitlabBitnamiGitLab EE 10.1 through 12.7.2 allows Information Disclosure.5.3 MediumgitlabBitnamiGitLab EE 12.4 and later through 12.7.2 has Incorrect Access Control.5.3 MediumgitlabBitnamiGitLab EE 8.8 and later through 12.7.2 has Insecure Permissions.5.3 MediumgitlabBitnamiGitLab EE 12.6 and later through 12.7.2 allows Denial of Service.7.5 HighgitlabBitnamiGitLab EE 8.9 and later through 12.7.2 has Insecure Permission5.3 MediumgitlabBitnamiGitLab EE 8.9 and later through 12.7.2 has Insecure Permission9.8 CriticalgitlabBitnamiAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 5.1 through...4.3 MediumgitlabBitnamiAn issue was discovered in GitLab Enterprise Edition (EE) 8.9.0 through 12.6.1. Using the project...5.3 Medium