gitlab vulnerabilities (Bitnami)
1,195 vulnerabilities.
gitlabBitnamiA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. API...6.5 MediumgitlabBitnamiA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. In certain...5.4 MediumgitlabBitnamiA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Project...4.3 MediumgitlabBitnamiA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was...5.4 MediumgitlabBitnamiA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The...8.1 HighgitlabBitnamiGitLab before version 13.3.4 was vulnerable to an OAuth authorization scope change without user...8.0 HighgitlabBitnamiFor GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be...6.4 MediumgitlabBitnamiFor GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature6.5 MediumgitlabBitnamiFor GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive...6.5 MediumgitlabBitnamiFor GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the...7.3 HighgitlabBitnamiFor GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the...7.3 HighgitlabBitnamiFor GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs, members from a parent...3.1 LowgitlabBitnamiIn GitLab before 13.0.12, 13.1.6, and 13.2.3, improper access control was used on the...7.5 HighgitlabBitnamiIn GitLab before 13.2.3, project sharing could temporarily allow too permissive access.8.1 HighgitlabBitnamiIn GitLab before 13.0.12, 13.1.6, and 13.2.3, a stored XSS vulnerability exists in the CI/CD Jobs...5.5 MediumgitlabBitnamiIn GitLab before 13.0.12, 13.1.6 and 13.2.3, it is possible to bypass E-mail verification which...9.6 CriticalgitlabBitnamiIn GitLab before 13.0.12, 13.1.6 and 13.2.3, access grants were not revoked when a user revoked...4.2 MediumgitlabBitnamiIn GitLab before 13.0.12, 13.1.6 and 13.2.3 using a branch with a hexadecimal name could override...6.3 MediumgitlabBitnamiGitLab EE 11.3 through 13.1.2 has Incorrect Access Control because of the Maven package upload...5.3 MediumgitlabBitnamiAn authorization issue relating to project maintainer impersonation was identified in GitLab EE 9...7.5 HighgitlabBitnamiKubernetes cluster token disclosure in GitLab CE/EE 10.3 and later through 13.0.1 allows other...5.3 MediumgitlabBitnamiAmazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other...5.3 MediumgitlabBitnamiClient-Side code injection through Mermaid markup in GitLab CE/EE 12.9 and later through 13.0.1...6.1 MediumgitlabBitnamiA user with an unverified email address could request an access to domain restricted groups in...8.0 HighgitlabBitnamiA security issue allowed achieving Denial of Service attacks through memory exhaustion by...7.5 HighgitlabBitnamiA Denial of Service vulnerability allowed exhausting the system resources in GitLab CE/EE 12.0...7.5 HighgitlabBitnamiUser email verification bypass in GitLab CE/EE 12.5 and later through 13.0.1 allows user to...4.3 MediumgitlabBitnamiOAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user...7.5 HighgitlabBitnamiUser is allowed to set an email as a notification email even without verifying the new email in...7.4 HighgitlabBitnamiAn authorization issue in the mirroring logic allowed read access to private repositories in...6.3 MediumgitlabBitnamilibpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.5.3 MediumgitlabBitnamiA Reflected Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code...6.1 MediumgitlabBitnamiMissing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1...7.5 HighgitlabBitnamiA specially crafted request could be used to confirm the existence of files hosted on object...5.3 MediumgitlabBitnamiA Stored Cross-Site Scripting vulnerability allowed the execution on Javascript payloads on the...6.1 MediumgitlabBitnamiA Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in...6.1 MediumgitlabBitnamiInsecure authorization in Project Deploy Keys in GitLab CE/EE 12.8 and later through 13.0.1...4.3 MediumgitlabBitnamiGitLab EE 12.8 and later allows Exposure of Sensitive Information to an Unauthorized Actor via...5.3 MediumgitlabBitnamiGitLab 12.6 through 12.9 is vulnerable to a privilege escalation that allows an external user to...5.3 MediumgitlabBitnamiGitLab 9.5.9 through 12.9 is vulnerable to stored XSS in an admin notification feature.4.8 MediumgitlabBitnamiGitLab 10.8 through 12.9 has a vulnerability that allows someone to mirror a repository even if...5.3 MediumgitlabBitnamiAn issue was discovered in GitLab CE and EE 8.15 through 12.9.2. Members of a group could still...6.5 MediumgitlabBitnamiAn issue was discovered in GitLab 10.7.0 and later through 12.9.2. A Workhorse bypass could lead...7.5 HighgitlabBitnamiAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7...7.5 HighgitlabBitnamiGitLab EE/CE 10.8 to 12.9 is leaking metadata and comments on vulnerabilities to unauthorized...4.3 MediumgitlabBitnamiGitLab EE/CE 8.17 to 12.9 is vulnerable to information leakage when querying a merge request widget.7.5 HighgitlabBitnamiGitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects.5.5 MediumgitlabBitnamiGitLab EE/CE 8.11 to 12.9 is leaking information on Issues opened in a public project and then...5.3 MediumgitlabBitnamiGitLab EE/CE 11.10 to 12.9 is leaking information on restricted CI pipelines metrics to...4.3 MediumgitlabBitnamiGitLab EE/CE 8.0.rc1 to 12.9 is vulnerable to a blind SSRF in the FogBugz integration.9.8 Critical- Show moreLoading…