Skip to contentGitlab vulnerabilities
Newest
- gitlabIn all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in...CVE-2021-39894Fix available5.4 Medium
- gitlabIn all versions of GitLab CE/EE since version 8.9, project exports may expose trigger tokens...CVE-2021-39869Fix available6.5 Medium
- gitlabIn all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea...CVE-2021-39867Fix available6.5 Medium
- gitlabIn all versions of GitLab CE/EE since version 13.6, it is possible to see pending invitations of...CVE-2021-39875Fix available5.3 Medium
- gitlabIn all versions of GitLab EE since version 8.13, an endpoint discloses names of private groups...CVE-2021-39884Fix available4.3 Medium
- gitlabIn all versions of GitLab CE/EE, provided a user ID, anonymous users can use a few endpoints to...CVE-2021-39882Fix available5.3 Medium
- gitlabIn all versions of GitLab EE since version 13.10, a specific API endpoint may reveal details...CVE-2021-39888Fix available4.3 Medium
- gitlabA potential DOS vulnerability was discovered in GitLab starting with version 9.1 that allowed...CVE-2021-39893Fix available5.3 Medium
- gitlabA stored Reflected Cross-Site Scripting vulnerability in the Jira integration in GitLab version...CVE-2021-39878Fix available5.8 Medium
- gitlabA stored Cross-Site Scripting vulnerability in the GitLab Flavored Markdown in GitLab CE/EE...CVE-2021-39887Fix available7.3 High
- gitlabIn all versions of GitLab CE/EE since version 8.12, an authenticated low-privileged malicious...CVE-2021-39868Fix available4.3 Medium
- gitlabA potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack...CVE-2021-22259Fix available4.3 Medium
- gitlabIn all versions of GitLab CE/EE since version 11.0, the requirement to enforce 2FA is not honored...CVE-2021-39874Fix available4.3 Medium
- gitlabImproper authorization checks in GitLab EE > 13.11 allows subgroup members to see epics from all...CVE-2021-39883Fix available4.3 Medium
- gitlabIn all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable...CVE-2021-39871Fix available4.3 Medium
- gitlabIn all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute...CVE-2021-39899Fix available2.9 Low
- gitlabInformation disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL...CVE-2021-39900Fix available2.0 Low
- gitlabIn all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature...CVE-2021-39896Fix available3.8 Low
- gitlabIn all versions of GitLab CE/EE, there exists a content spoofing vulnerability which may be...CVE-2021-39873Fix available4.3 Medium
- gitlabMissing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an attacker...CVE-2021-39879Fix available2.2 Low
- gitlabA vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to...CVE-2021-39877Fix available7.7 High
- gitlabA Stored XSS in merge request creation page in Gitlab EE version 13.5 and above allows an...CVE-2021-39885Fix available8.7 High
- gitlabAn unauthorized user was able to insert metadata when creating new issue on GitLab CE/EE 14.0 and...CVE-2021-22239Fix available5.0 Medium
- gitlabDue to improper handling of OAuth client IDs, new subscriptions generated OAuth tokens on an...CVE-2021-22236Fix available5.5 Medium
- gitlabInsufficient input sanitization in Mermaid markdown in GitLab CE/EE version 11.4 and up allows an...CVE-2021-22242Fix availableEPSS 63.6%8.7 High
- gitlabUnder specialized conditions, GitLab may allow a user with an impersonation token to perform Git...CVE-2021-22237Fix available6.6 Medium
- gitlabUnder specialized conditions, GitLab CE/EE versions starting 7.10 may allow existing GitLab users...CVE-2021-22243Fix available5.0 Medium
- gitlabImproper authorization in the vulnerability report feature in GitLab EE affecting all versions...CVE-2021-22244Fix available3.1 Low
- gitlabImproper authorization in GitLab CE/EE affecting all versions since 13.0 allows guests in private...CVE-2021-22247Fix available4.3 Medium
- gitlabImproper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker...CVE-2021-22245Fix available2.7 Low
- gitlabImproper authorization in GitLab CE/EE affecting all versions since 12.6 allowed guest users to...CVE-2021-22256Fix available5.4 Medium
- gitlabImproper authorization in GitLab CE/EE affecting all versions since 13.3 allowed users to view...CVE-2021-22250Fix available5.4 Medium
- gitlabA verbose error message in GitLab EE affecting all versions since 12.2 could disclose the private...CVE-2021-22249Fix available4.3 Medium
- gitlabImproper authorization on the pipelines page in GitLab CE/EE affecting all versions since 13.12...CVE-2021-22248Fix available5.3 Medium
- gitlabImproper validation of invited users' email address in GitLab EE affecting all versions since 12...CVE-2021-22251Fix available4.3 Medium
- gitlabA confusion between tag and branch names in GitLab CE/EE affecting all versions since 13.7...CVE-2021-22252Fix available6.5 Medium
- gitlabImproper authorization in GitLab EE affecting all versions since 13.4 allowed a user who...CVE-2021-22253Fix available4.9 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting with 13.3. GitLab was...CVE-2021-22238Fix availableEPSS 71.8%6.8 Medium
- gitlabA vulnerability was discovered in GitLab versions before 14.0.2, 13.12.6, 13.11.6. GitLab Webhook...CVE-2021-22246Fix available7.7 High
- gitlabUnder very specific conditions a user could be impersonated using Gitlab shell. This...CVE-2021-22254Fix available3.1 Low
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting with 13.11, 13.12...CVE-2021-22234Fix available9.6 Critical
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0. It was...CVE-2021-22241Fix available8.7 High
- gitlab, gitlab ee +1 moreImproper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be...CVE-2021-22240Fix available4.2 Medium
- gitlabAn information disclosure vulnerability in GitLab EE versions 13.10 and later allowed a user to...CVE-2021-22233Fix available4.3 Medium
- gitlabA cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and...CVE-2021-22224Fix available7.1 High
- gitlabInsufficient input sanitization in markdown in GitLab version 13.11 and up allows an attacker to...CVE-2021-22225Fix available4.7 Medium
- gitlabImproper code rendering while rendering merge requests could be exploited to submit malicious...CVE-2021-22230Fix available4.9 Medium
- gitlabA reflected cross-site script vulnerability in GitLab before versions 13.11.6, 13.12.6 and 14.0.2...CVE-2021-22227Fix available6.1 Medium
- gitlabA denial of service in user's profile page is found starting with GitLab CE/EE 8.0 that allows...CVE-2021-22231Fix available3.5 Low
- gitlabClient-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9 allows a...CVE-2021-22223Fix available6.1 Medium
- Show moreLoading…