Gitlab Ce/ee vulnerabilities

• gitlab, gitlab ce/ee +1 more Weak Password Recovery Mechanism for Forgotten Password in GitLab CVE-2023-7028 In KEVPublic exploitFix available EPSS 94.5% 10.0 CriticalJanuary 12, 2024
• gitlab, gitlab ce/ee +1 more A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to <13.4.7, >... CVE-2020-26408 Fix available 5.3 MediumDecember 11, 2020
• gitlab, gitlab ce/ee +1 more An issue was discovered in Gitlab CE/EE versions >= 13.1 to <13.4.7, >= 13.5 to <13.5.5, and >=... CVE-2020-13357 Fix available 4.3 MediumDecember 11, 2020
• gitlab, gitlab ce/ee +1 more An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13... CVE-2020-26413 Public exploitFix available EPSS 34.9% 5.3 MediumDecember 11, 2020
• gitlab, gitlab ce/ee +1 more Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and... CVE-2020-26417 Fix available 5.3 MediumDecember 11, 2020
• gitlab, gitlab ce/ee +1 more A DOS vulnerability exists in Gitlab CE/EE >=10.3, <13.4.7,>=13.5, <13.5.5,>=13.6, <13.6.2 that... CVE-2020-26409 Fix available 4.3 MediumDecember 11, 2020
• gitlab, gitlab ce/ee +1 more A XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6... CVE-2020-26407 Fix available 5.5 MediumDecember 10, 2020
• gitlab, gitlab ce/ee +1 more The Terraform API in GitLab CE/EE 12.10+ exposed the object storage signed URL on the delete... CVE-2020-13359 Fix available 7.6 HighNovember 18, 2020
• gitlab, gitlab ce/ee +1 more An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.8.9. A... CVE-2020-13356 Fix available 8.2 HighNovember 18, 2020
• gitlab, gitlab ce/ee +1 more An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14. A path... CVE-2020-13355 Fix available 7.5 HighNovember 18, 2020
• gitlab, gitlab ce/ee +1 more Path traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8... CVE-2020-26405 Fix available 7.1 HighNovember 17, 2020
• gitlab, gitlab ce/ee +1 more CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able... CVE-2020-13350 Fix available 3.1 LowNovember 17, 2020
• gitlab, gitlab ce/ee +1 more Insufficient permission checks in scheduled pipeline API in GitLab CE/EE 13.0+ allows an attacker... CVE-2020-13351 Fix available 6.5 MediumNovember 17, 2020
• gitlab, gitlab ce/ee +1 more A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 12.6. The... CVE-2020-13354 Fix available 4.3 MediumNovember 17, 2020
• gitlab, gitlab ce/ee +1 more Private group info is leaked leaked in GitLab CE/EE version 10.2 and above, when the project is... CVE-2020-13352 Fix available 3.7 LowNovember 17, 2020
• gitlab, gitlab ce/ee +1 more A vulnerability in the internal Kubernetes agent api in GitLab CE/EE version 13.3 and above... CVE-2020-13358 Fix available 4.7 MediumNovember 17, 2020
• gitlab, gitlab ce/ee +1 more An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community... CVE-2019-15578 5.3 MediumJanuary 28, 2020
• gitlab, gitlab ce/ee +1 more An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community... CVE-2019-15579 5.3 MediumJanuary 28, 2020
• gitlab, gitlab ce/ee +1 more An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to... CVE-2019-5466 4.3 MediumJanuary 28, 2020
• gitlab, gitlab ce/ee +1 more An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move... CVE-2019-5465 4.3 MediumJanuary 28, 2020
• gitlab, gitlab ce/ee +1 more An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community... CVE-2019-15583 7.5 HighJanuary 28, 2020
• gitlab, gitlab ce/ee +1 more A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the ... CVE-2019-5464 9.8 CriticalJanuary 28, 2020
• gitlab, gitlab ce/ee +1 more Improper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition ... CVE-2019-15585 9.8 CriticalJanuary 28, 2020
• gitlab, gitlab ce/ee +1 more A XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin. CVE-2019-15586 6.1 MediumJanuary 28, 2020
• gitlab, gitlab ce/ee +1 more A denial of service exists in gitlab <v12.3.2, <v12.2.6, and <v12.1.10 that would let an attacker... CVE-2019-15584 6.5 MediumDecember 20, 2019
• gitlab, gitlab ce/ee +1 more An improper access control vulnerability exists in Gitlab <v12.3.2, <v12.2.6, <v12.1.12 which... CVE-2019-15589 8.8 HighDecember 18, 2019
• gitlab, gitlab ce/ee +1 more A command injection exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an... CVE-2019-15575 7.5 HighDecember 18, 2019
• gitlab, gitlab ce/ee +1 more An information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12... CVE-2019-15576 7.5 HighDecember 18, 2019
• gitlab, gitlab ce/ee +1 more An information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12... CVE-2019-15577 4.3 MediumDecember 18, 2019
• gitlab, gitlab ce/ee +1 more A authentication bypass vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.10 in... CVE-2019-5486 8.8 HighDecember 18, 2019
• gitlab, gitlab ce/ee +1 more An input validation and output encoding issue was discovered in the GitLab CE/EE wiki pages... CVE-2019-5467 5.4 MediumSeptember 9, 2019
• gitlab, gitlab ce/ee +1 more An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could... CVE-2019-5463 5.3 MediumSeptember 9, 2019