Skip to contentGitlab vulnerabilities
Newest
- gitlab, gitlab community and enterprise editions +1 moreGitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL...CVE-2017-09147.5 High
- gitlab, gitlab community and enterprise editions, debian linux +2 moreGitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary...CVE-2018-37107.8 High
- gitlab, debian linux, gitlab community and enterprise editions +2 moreGitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the...CVE-2017-09268.8 High
- gitlab, debian linux, gitlab community and enterprise editions +2 moreGitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential...CVE-2017-09257.2 High
- gitlab, debian linux, gitlab community and enterprise editions +2 moreGitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI...CVE-2017-09188.8 High
- gitlab, debian linux, gitlab community and enterprise editions +2 moreGitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job...CVE-2017-09176.1 Medium
- gitlab, debian linux, gitlab community and enterprise editions +2 moreGitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the...CVE-2017-09169.8 Critical
- gitlab, debian linux, gitlab community and enterprise editions +2 moreGitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the...CVE-2017-09159.8 Critical
- gitlabThe groups API in GitLab 6.x and 7.x before 7.4.3 allows remote authenticated guest users to...CVE-2014-85406.5 Medium
- gitlabGitLab 9.4.x before 9.4.2 does not support LDAP SSL certificate verification, but a...CVE-2017-177165.9 Medium
- gitlabGitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1...CVE-2017-12426Public exploit8.8 High
- gitlabGitLab Community Edition (CE) and Enterprise Edition (EE) before 9.0.11, 9.1.8, 9.2.8 allow an...CVE-2017-114386.3 Medium
- gitlabGitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an...CVE-2017-114376.5 Medium
- gitlabGitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element...CVE-2017-87786.1 Medium
- gitlabMultiple versions of GitLab expose sensitive user credentials when assigning a user to an issue...CVE-2017-08826.3 Medium
- gitlabMultiple versions of GitLab expose a dangerous method to any authenticated user that could lead...CVE-2016-94698.2 High
- gitlabThe impersonate feature in Gitlab 8.7.0, 8.6.0 through 8.6.7, 8.5.0 through 8.5.11, 8.4.0 through...CVE-2016-4340Public exploitEPSS 10.1%8.8 High
- gitlabGitLab versions 8.9.x and above contain a critical security flaw in the "import/export project"...CVE-2016-90866.5 Medium
- gitlabGitLab Grit Gem for Ruby contains a flaw allowing arbitrary commands to be executedCVE-2013-4489Fix available6.5 Medium
- gitlabCross-site scripting (XSS) vulnerability in GitLab Enterprise Edition (EE) 6.6.0 before 6.6.2...CVE-2014-34564.3 Medium
- gitlab, gitlab gitlab-shell +1 moreThe repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote...CVE-2013-45466.5 Medium
- gitlab, gitlab gitlab-shell +1 moreThe SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5...CVE-2013-4490Public exploitEPSS 42.1%6.5 Medium
- gitlab, gitlab gitlab-shell +1 moreGitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and...CVE-2013-45816.8 Medium
- gitlabGitLab before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1, when...CVE-2013-45806.8 Medium
- gitlabCross-site scripting (XSS) vulnerability in GitLab 6.0 and other versions before 6.5.0 allows...CVE-2013-7316Public exploit4.3 Medium