Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Gitlab

Gitlab vulnerabilities

Products

Gitlab1,509
Ce/ee32
Community And Enterprise Editions13
Ee11
Runner6
Gitlab-shell5
Dynamic Application Security Testing Analyzer4
Ai Gateway4
Community Edition3
Runner3
Community And Enterprise Editions2
Community Edition And Enterprise Edition2
Dast2
Enterprise Edition2
Gitlab-vscode-extension2

Newest

Known exploitedIn KEVPublic exploitFix available

gitlabAn authorization issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 that...CVE-2019-54727.5 HighJanuary 28, 2020
gitlabAn information disclosure issue was discovered GitLab versions < 12.1.2, < 12.0.4, and < 11.11.6...CVE-2019-54707.5 HighJanuary 28, 2020
gitlab, gitlab ce/ee +1 moreAn information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community...CVE-2019-155785.3 MediumJanuary 28, 2020
gitlab, gitlab ce/ee +1 moreAn information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community...CVE-2019-155795.3 MediumJanuary 28, 2020
giltlab gitlabAn privilege escalation issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6...CVE-2019-54688.8 HighJanuary 28, 2020
gitlab, gitlab ee +1 moreAn IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and...CVE-2019-155815.3 MediumJanuary 28, 2020
gitlab, gitlab ce/ee +1 moreAn IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to...CVE-2019-54664.3 MediumJanuary 28, 2020
gitlab, gitlab ee +1 moreAn IDOR was discovered in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and...CVE-2019-155825.3 MediumJanuary 28, 2020
gitlab, gitlab ee +1 moreAn access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition ...CVE-2019-155907.5 HighJanuary 28, 2020
gitlab, gitlab ee +1 moreAn authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the...CVE-2019-54746.5 MediumJanuary 28, 2020
gitlab, gitlab ce/ee +1 moreAn information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move...CVE-2019-54654.3 MediumJanuary 28, 2020
gitlab, gitlab ce/ee +1 moreAn information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community...CVE-2019-155837.5 HighJanuary 28, 2020
gitlab, gitlab ce/ee +1 moreA flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the ...CVE-2019-54649.8 CriticalJanuary 28, 2020
gitlab, gitlab ce/ee +1 moreImproper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition ...CVE-2019-155859.8 CriticalJanuary 28, 2020
gitlab, gitlab community edition and gitlab enterprise edition +1 moreA privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are...CVE-2019-54628.8 HighJanuary 28, 2020
gitlab, gitlab ce/ee +1 moreA XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin.CVE-2019-155866.1 MediumJanuary 28, 2020
gitlabAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 12.3 through...CVE-2019-201424.3 MediumJanuary 13, 2020
gitlabAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 12.6. It has...CVE-2019-201435.3 MediumJanuary 13, 2020
gitlabAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 10.8 through...CVE-2019-201444.3 MediumJanuary 13, 2020
gitlabAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 11.4 through...CVE-2019-201454.3 MediumJanuary 13, 2020
gitlabAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 11.0 through...CVE-2019-201465.3 MediumJanuary 13, 2020
gitlabAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 9.1 through...CVE-2019-201475.3 MediumJanuary 13, 2020
gitlabAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 8.13 through...CVE-2019-201485.3 MediumJanuary 13, 2020
gitlabAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 5.1 through...CVE-2020-5197Fix available4.3 MediumJanuary 13, 2020
gitlabAn issue was discovered in GitLab Enterprise Edition (EE) 8.9.0 through 12.6.1. Using the project...CVE-2020-6832Fix available5.3 MediumJanuary 13, 2020
gitlabIn GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a...CVE-2019-196297.5 HighJanuary 5, 2020
gitlabIn GitLab EE 11.3 through 12.5.3, 12.4.5, and 12.3.8, insufficient parameter sanitization for the...CVE-2019-196289.8 CriticalJanuary 5, 2020
gitlabGitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext.CVE-2019-193147.5 HighJanuary 5, 2020
gitlabGitLab EE 12.3 through 12.5, 12.4.3, and 12.3.6 allows Denial of Service. Certain characters were...CVE-2019-193137.5 HighJanuary 5, 2020
gitlabGitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 has Incorrect Access Control. After a project...CVE-2019-193125.8 MediumJanuary 5, 2020
gitlabGitLab Enterprise Edition (EE) 9.0 and later through 12.5 allows Information Disclosure.CVE-2019-193104.9 MediumJanuary 3, 2020
gitlabGitLab Enterprise Edition (EE) 8.90 and later through 12.5 has Incorrect Access Control.CVE-2019-193094.3 MediumJanuary 3, 2020
gitlabGitLab Enterprise Edition (EE) 8.2 and later through 12.5 has Insecure Permissions.CVE-2019-192634.3 MediumJanuary 3, 2020
gitlabGitLab Enterprise Edition (EE) 11.9 and later through 12.5 has Insecure Permissions.CVE-2019-192624.3 MediumJanuary 3, 2020
gitlabGitLab Enterprise Edition (EE) 6.7 and later through 12.5 allows SSRF.CVE-2019-192618.8 HighJanuary 3, 2020
gitlabGitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access...CVE-2019-192605.4 MediumJanuary 3, 2020
gitlabGitLab Enterprise Edition (EE) 11.3 and later through 12.5 allows an Insecure Direct Object...CVE-2019-192594.3 MediumJanuary 3, 2020
gitlabGitLab Enterprise Edition (EE) 10.8 and later through 12.5 has Incorrect Access Control.CVE-2019-192585.3 MediumJanuary 3, 2020
gitlabGitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access...CVE-2019-192575.3 MediumJanuary 3, 2020
gitlabGitLab Enterprise Edition (EE) 12.2 and later through 12.5 has Incorrect Access Control.CVE-2019-192565.3 MediumJanuary 3, 2020
gitlabGitLab Enterprise Edition (EE) 12.3 and later through 12.5 has Incorrect Access Control.CVE-2019-192554.3 MediumJanuary 3, 2020
gitlabGitLab Community Edition (CE) and Enterprise Edition (EE). 9.6 and later through 12.5 has...CVE-2019-192545.3 MediumJanuary 3, 2020
gitlabGitlab Enterprise Edition (EE) 11.3 through 12.4.2 allows Directory Traversal.CVE-2019-190889.8 CriticalJanuary 3, 2020
gitlabGitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 2 of 2).CVE-2019-190874.3 MediumJanuary 3, 2020
gitlabGitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 1 of 2).CVE-2019-190864.3 MediumJanuary 3, 2020
gitlabGitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 allows XSS in group and profile fields.CVE-2019-193115.4 MediumJanuary 3, 2020
gitlabAn issue was discovered in GitLab Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x...CVE-2018-205075.3 MediumDecember 30, 2019
gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before...CVE-2018-205016.3 MediumDecember 30, 2019
gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.x before 11.4.13, 11...CVE-2018-204997.2 HighDecember 30, 2019
gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before...CVE-2018-204984.3 MediumDecember 30, 2019
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open