Skip to contentGitlab vulnerabilities
Newest
- gitlabAn information disclosure vulnerability in GitLab CE/EE versions 12.0 to 14.3.6, 14.4 to 14.4.4,...CVE-2021-39941Fix available3.7 Low
- gitlab, gitlab community and enterprise editions +1 moreAn issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14...CVE-2021-39935In KEVFix availableEPSS 36.1%6.8 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14...CVE-2021-39932Fix available4.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14...CVE-2021-39917Fix available4.3 Medium
- gitlabImproper access control allows any project member to retrieve the service desk email address in...CVE-2021-39934Fix available4.3 Medium
- gitlabLack of an access control check in the External Status Check feature allowed any authenticated...CVE-2021-39916Fix available4.3 Medium
- gitlabIn all versions of GitLab CE/EE starting version 14.0 before 14.3.6, all versions starting from...CVE-2021-39919Fix available4.4 Medium
- gitlabImproper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from...CVE-2021-39915Fix available5.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14...CVE-2021-39933Fix available4.3 Medium
- gitlabA vulnerable regular expression pattern in GitLab CE/EE since version 8.15 before 14.3.6, all...CVE-2021-39938Fix available3.1 Low
- gitlabA collision in access memoization logic in all versions of GitLab CE/EE before 14.3.6, all...CVE-2021-39937Fix available5.9 Medium
- gitlabImproper access control in GitLab CE/EE affecting all versions starting from 10.7 before 14.3.6,...CVE-2021-39936Fix available3.5 Low
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11 before 14...CVE-2021-39931Fix available3.1 Low
- gitlabImproper access control in the GitLab CE/EE API affecting all versions starting from 9.4 before...CVE-2021-39945Fix available2.7 Low
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14...CVE-2021-39944Fix available7.1 High
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 before 14...CVE-2021-39940Fix available4.3 Medium
- gitlabIncorrect Authorization in GitLab EE affecting all versions starting from 11.1 before 14.3.6, all...CVE-2021-39918Fix available3.1 Low
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 14...CVE-2021-39910Fix available2.6 Low
- gitlabAssuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some...CVE-2021-22170Fix available6.2 Medium
- gitlabIt was possible to bypass 2FA for LDAP users and access some specific pages with Basic...CVE-2021-39890Fix available3.1 Low
- gitlabIn all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook...CVE-2021-39898Fix available3.7 Low
- gitlabAn information disclosure vulnerability in the GitLab CE/EE API since version 8.9.6 allows a user...CVE-2021-39905Fix available4.3 Medium
- gitlabAn improper access control flaw in GitLab CE/EE since version 13.9 exposes private email address...CVE-2021-39911Fix available1.7 Low
- gitlabA potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The...CVE-2021-39907Fix available5.3 Medium
- gitlabAn Improper Access Control vulnerability in the GraphQL API in GitLab CE/EE since version 13.1...CVE-2021-39904Fix available4.3 Medium
- gitlabIn all versions of GitLab CE/EE since version 8.0, an attacker can set the pipeline schedules to...CVE-2021-39895Fix available6.0 Medium
- gitlabA stored Cross-Site Scripting vulnerability in the DataDog integration in GitLab CE/EE version 13...CVE-2021-22260Fix available7.7 High
- gitlabIn all versions of GitLab CE/EE since version 11.10, an admin of a group can see the SCIM token...CVE-2021-39901Fix available2.7 Low
- gitlabAccidental logging of system root password in the migration log in all versions of GitLab CE/EE...CVE-2021-39913Fix available4.4 Medium
- gitlabImproper access control in GitLab CE/EE version 10.5 and above allowed subgroup members with...CVE-2021-39897Fix available2.6 Low
- gitlabA potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7. Using a...CVE-2021-39912Fix available5.3 Medium
- gitlabImproper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to...CVE-2021-39906Fix availableEPSS 60.7%8.7 High
- gitlabLack of email address ownership verification in the CODEOWNERS feature in all versions of GitLab...CVE-2021-39909Fix available5.3 Medium
- gitlabIn all versions of GitLab CE/EE since version 13.0, a privileged user, through an API call, can...CVE-2021-39903Fix available6.5 Medium
- gitlabIncorrect Authorization in GitLab CE/EE 13.4 or above allows a user with guest membership in a...CVE-2021-39902Fix available4.3 Medium
- gitlabA regular expression denial of service issue in GitLab versions 8.13 to 14.2.5, 14.3.0 to 14.3.3...CVE-2021-39914Fix available3.1 Low
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 13.0 before 14.0.9,...CVE-2021-22263Fix available5.5 Medium
- gitlabapollo_upload_server has Denial of Service vulnerabilityCVE-2021-39880Fix available6.5 Medium
- gitlabA stored Cross-Site Scripting vulnerability in the Jira integration in GitLab version 13.7 and...CVE-2021-22261Fix available7.3 High
- gitlabThe project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise...CVE-2021-22258Fix available4.3 Medium
- gitlabMissing access control in GitLab version 13.10 and above with Jira Cloud integration enabled...CVE-2021-22262Fix available5.4 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.0.9,...CVE-2021-22257Fix available5.3 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 13.8 before 14.0.9,...CVE-2021-22264Fix available6.8 Medium
- gitlabIn all versions of GitLab EE since version 14.1, due to an insecure direct object reference...CVE-2021-39889Fix available4.3 Medium
- gitlabIn all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable...CVE-2021-39870Fix available4.3 Medium
- gitlabIn all versions of GitLab CE/EE since version 7.7, the application may let a malicious user...CVE-2021-39881Fix available3.5 Low
- gitlabPermissions rules were not applied while issues were moved between projects of the same group in...CVE-2021-39886Fix available2.6 Low
- gitlabIn all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's...CVE-2021-39891Fix available5.9 Medium
- gitlabA business logic error in the project deletion process in GitLab 13.6 and later allows persistent...CVE-2021-39866Fix available5.4 Medium
- gitlabIn all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability...CVE-2021-39872Fix available6.5 Medium
- Show moreLoading…