gitlab vulnerabilities (Ubuntu)
926 vulnerabilities.
gitlabUbuntuAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 before 14...4.3 MediumgitlabUbuntuIncorrect Authorization in GitLab EE affecting all versions starting from 11.1 before 14.3.6, all...3.1 LowgitlabUbuntuAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 14...2.6 LowgitlabUbuntuAssuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some...6.2 MediumgitlabUbuntuIt was possible to bypass 2FA for LDAP users and access some specific pages with Basic...3.1 LowgitlabUbuntuIn all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook...3.7 LowgitlabUbuntuAn information disclosure vulnerability in the GitLab CE/EE API since version 8.9.6 allows a user...4.3 MediumgitlabUbuntuAn improper access control flaw in GitLab CE/EE since version 13.9 exposes private email address...1.7 LowgitlabUbuntuA potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The...5.3 MediumgitlabUbuntuAn Improper Access Control vulnerability in the GraphQL API in GitLab CE/EE since version 13.1...4.3 MediumgitlabUbuntuIn all versions of GitLab CE/EE since version 8.0, an attacker can set the pipeline schedules to...6.0 MediumgitlabUbuntuA stored Cross-Site Scripting vulnerability in the DataDog integration in GitLab CE/EE version 13...7.7 HighgitlabUbuntuIn all versions of GitLab CE/EE since version 11.10, an admin of a group can see the SCIM token...2.7 LowgitlabUbuntuAccidental logging of system root password in the migration log in all versions of GitLab CE/EE...4.4 MediumgitlabUbuntuImproper access control in GitLab CE/EE version 10.5 and above allowed subgroup members with...2.6 LowgitlabUbuntuImproper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to...8.7 HighgitlabUbuntuIn all versions of GitLab CE/EE since version 13.0, a privileged user, through an API call, can...6.5 MediumgitlabUbuntuIncorrect Authorization in GitLab CE/EE 13.4 or above allows a user with guest membership in a...4.3 MediumgitlabUbuntuA regular expression denial of service issue in GitLab versions 8.13 to 14.2.5, 14.3.0 to 14.3.3...3.1 LowgitlabUbuntuAn issue has been discovered in GitLab affecting all versions starting from 13.0 before 14.0.9,...5.5 MediumgitlabUbuntuapollo_upload_server has Denial of Service vulnerability6.5 MediumgitlabUbuntuA stored Cross-Site Scripting vulnerability in the Jira integration in GitLab version 13.7 and...7.3 HighgitlabUbuntuThe project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise...4.3 MediumgitlabUbuntuMissing access control in GitLab version 13.10 and above with Jira Cloud integration enabled...5.4 MediumgitlabUbuntuAn issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.0.9,...5.3 MediumgitlabUbuntuAn issue has been discovered in GitLab affecting all versions starting from 13.8 before 14.0.9,...6.8 MediumgitlabUbuntuIn all versions of GitLab EE since version 14.1, due to an insecure direct object reference...4.3 MediumgitlabUbuntuIn all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable...4.3 MediumgitlabUbuntuIn all versions of GitLab CE/EE since version 7.7, the application may let a malicious user...3.5 LowgitlabUbuntuPermissions rules were not applied while issues were moved between projects of the same group in...2.6 LowgitlabUbuntuIn all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's...5.9 MediumgitlabUbuntuA business logic error in the project deletion process in GitLab 13.6 and later allows persistent...5.4 MediumgitlabUbuntuIn all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability...6.5 MediumgitlabUbuntuIn all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in...5.4 MediumgitlabUbuntuIn all versions of GitLab CE/EE since version 8.9, project exports may expose trigger tokens...6.5 MediumgitlabUbuntuIn all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea...6.5 MediumgitlabUbuntuIn all versions of GitLab CE/EE since version 13.6, it is possible to see pending invitations of...5.3 MediumgitlabUbuntuIn all versions of GitLab EE since version 8.13, an endpoint discloses names of private groups...4.3 MediumgitlabUbuntuIn all versions of GitLab CE/EE, provided a user ID, anonymous users can use a few endpoints to...5.3 MediumgitlabUbuntuIn all versions of GitLab EE since version 13.10, a specific API endpoint may reveal details...4.3 MediumgitlabUbuntuA potential DOS vulnerability was discovered in GitLab starting with version 9.1 that allowed...5.3 MediumgitlabUbuntuA stored Reflected Cross-Site Scripting vulnerability in the Jira integration in GitLab version...5.8 MediumgitlabUbuntuA stored Cross-Site Scripting vulnerability in the GitLab Flavored Markdown in GitLab CE/EE...7.3 HighgitlabUbuntuIn all versions of GitLab CE/EE since version 8.12, an authenticated low-privileged malicious...4.3 MediumgitlabUbuntuA potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack...4.3 MediumgitlabUbuntuIn all versions of GitLab CE/EE since version 11.0, the requirement to enforce 2FA is not honored...4.3 MediumgitlabUbuntuImproper authorization checks in GitLab EE > 13.11 allows subgroup members to see epics from all...4.3 MediumgitlabUbuntuIn all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable...4.3 MediumgitlabUbuntuIn all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute...2.9 LowgitlabUbuntuInformation disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL...2.0 Low- Show moreLoading…