gitlab vulnerabilities (Bitnami)
1,195 vulnerabilities.
gitlabBitnamiA potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The...5.3 MediumgitlabBitnamiAn Improper Access Control vulnerability in the GraphQL API in GitLab CE/EE since version 13.1...4.3 MediumgitlabBitnamiIn all versions of GitLab CE/EE since version 8.0, an attacker can set the pipeline schedules to...6.0 MediumgitlabBitnamiA stored Cross-Site Scripting vulnerability in the DataDog integration in GitLab CE/EE version 13...7.7 HighgitlabBitnamiIn all versions of GitLab CE/EE since version 11.10, an admin of a group can see the SCIM token...2.7 LowgitlabBitnamiAccidental logging of system root password in the migration log in all versions of GitLab CE/EE...4.4 MediumgitlabBitnamiImproper access control in GitLab CE/EE version 10.5 and above allowed subgroup members with...2.6 LowgitlabBitnamiA potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7. Using a...5.3 MediumgitlabBitnamiImproper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to...8.7 HighgitlabBitnamiLack of email address ownership verification in the CODEOWNERS feature in all versions of GitLab...5.3 MediumgitlabBitnamiIn all versions of GitLab CE/EE since version 13.0, a privileged user, through an API call, can...6.5 MediumgitlabBitnamiIncorrect Authorization in GitLab CE/EE 13.4 or above allows a user with guest membership in a...4.3 MediumgitlabBitnamiA regular expression denial of service issue in GitLab versions 8.13 to 14.2.5, 14.3.0 to 14.3.3...3.1 LowgitlabBitnamiAn issue has been discovered in GitLab affecting all versions starting from 13.0 before 14.0.9,...5.5 MediumgitlabBitnamiapollo_upload_server has Denial of Service vulnerability6.5 MediumgitlabBitnamiA stored Cross-Site Scripting vulnerability in the Jira integration in GitLab version 13.7 and...7.3 HighgitlabBitnamiThe project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise...4.3 MediumgitlabBitnamiMissing access control in GitLab version 13.10 and above with Jira Cloud integration enabled...5.4 MediumgitlabBitnamiAn issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.0.9,...5.3 MediumgitlabBitnamiAn issue has been discovered in GitLab affecting all versions starting from 13.8 before 14.0.9,...6.8 MediumgitlabBitnamiIn all versions of GitLab EE since version 14.1, due to an insecure direct object reference...4.3 MediumgitlabBitnamiIn all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable...4.3 MediumgitlabBitnamiIn all versions of GitLab CE/EE since version 7.7, the application may let a malicious user...3.5 LowgitlabBitnamiPermissions rules were not applied while issues were moved between projects of the same group in...2.6 LowgitlabBitnamiIn all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's...5.9 MediumgitlabBitnamiA business logic error in the project deletion process in GitLab 13.6 and later allows persistent...5.4 MediumgitlabBitnamiIn all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability...6.5 MediumgitlabBitnamiIn all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in...5.4 MediumgitlabBitnamiIn all versions of GitLab CE/EE since version 8.9, project exports may expose trigger tokens...6.5 MediumgitlabBitnamiIn all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea...6.5 MediumgitlabBitnamiIn all versions of GitLab CE/EE since version 13.6, it is possible to see pending invitations of...5.3 MediumgitlabBitnamiIn all versions of GitLab EE since version 8.13, an endpoint discloses names of private groups...4.3 MediumgitlabBitnamiIn all versions of GitLab CE/EE, provided a user ID, anonymous users can use a few endpoints to...5.3 MediumgitlabBitnamiIn all versions of GitLab EE since version 13.10, a specific API endpoint may reveal details...4.3 MediumgitlabBitnamiA potential DOS vulnerability was discovered in GitLab starting with version 9.1 that allowed...5.3 MediumgitlabBitnamiA stored Reflected Cross-Site Scripting vulnerability in the Jira integration in GitLab version...5.8 MediumgitlabBitnamiA stored Cross-Site Scripting vulnerability in the GitLab Flavored Markdown in GitLab CE/EE...7.3 HighgitlabBitnamiIn all versions of GitLab CE/EE since version 8.12, an authenticated low-privileged malicious...4.3 MediumgitlabBitnamiA potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack...4.3 MediumgitlabBitnamiIn all versions of GitLab CE/EE since version 11.0, the requirement to enforce 2FA is not honored...4.3 MediumgitlabBitnamiImproper authorization checks in GitLab EE > 13.11 allows subgroup members to see epics from all...4.3 MediumgitlabBitnamiIn all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable...4.3 MediumgitlabBitnamiIn all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute...2.9 LowgitlabBitnamiInformation disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL...2.0 LowgitlabBitnamiIn all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature...3.8 LowgitlabBitnamiIn all versions of GitLab CE/EE, there exists a content spoofing vulnerability which may be...4.3 MediumgitlabBitnamiMissing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an attacker...2.2 LowgitlabBitnamiA vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to...7.7 HighgitlabBitnamiA Stored XSS in merge request creation page in Gitlab EE version 13.5 and above allows an...8.7 HighgitlabBitnamiAn unauthorized user was able to insert metadata when creating new issue on GitLab CE/EE 14.0 and...5.0 Medium- Show moreLoading…