Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 17.0.8 | 17.0.8 | ||
| 17.0.7 | 17.0.7 | ||
| 17.0.6 | 17.0.6 | ||
| 17.0.5 | 17.0.5 | ||
| 17.0.4 | 17.0.4 | ||
| 17.0.3 | 17.0.3 | ||
| 17.0.2 | 17.0.2 | ||
| 17.0.1 | 17.0.1 | ||
| 17.0.0 | 17.0.0 |
Показывать по
Количество 5 943
CVE-2018-17452
An issue was discovered in GitLab Community and Enterprise Edition bef ...
CVE-2018-17452
An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Server-Side Request Forgery (SSRF) via a loopback address to the validate_localhost function in url_blocker.rb.
CVE-2018-17451
An issue was discovered in GitLab Community and Enterprise Edition bef ...
CVE-2018-17451
An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Cross Site Request Forgery (CSRF) in the Slack integration for issuing slash commands.
CVE-2018-17450
An issue was discovered in GitLab Community and Enterprise Edition bef ...
CVE-2018-17450
An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Server-Side Request Forgery (SSRF) via the Kubernetes integration, leading (for example) to disclosure of a GCP service token.
CVE-2018-17449
An issue was discovered in GitLab Community and Enterprise Edition bef ...
CVE-2018-17449
An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Remote attackers could obtain sensitive information about issues, comments, and project titles via events API insecure direct object reference.
CVE-2018-15472
An issue was discovered in GitLab Community and Enterprise Edition bef ...
CVE-2018-15472
An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. The diff formatter using rouge can block for a long time in Sidekiq jobs without any timeout.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2018-17452 An issue was discovered in GitLab Community and Enterprise Edition bef ... | CVSS3: 9.8 | 1% Низкий | больше 3 лет назад |
 | CVE-2018-17452 An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Server-Side Request Forgery (SSRF) via a loopback address to the validate_localhost function in url_blocker.rb. | CVSS3: 9.8 | 1% Низкий | больше 3 лет назад |
| CVE-2018-17451 An issue was discovered in GitLab Community and Enterprise Edition bef ... | CVSS3: 8.8 | 0% Низкий | больше 3 лет назад |
| CVE-2018-17451 An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Cross Site Request Forgery (CSRF) in the Slack integration for issuing slash commands. | CVSS3: 8.8 | 0% Низкий | больше 3 лет назад |
| CVE-2018-17450 An issue was discovered in GitLab Community and Enterprise Edition bef ... | CVSS3: 4.3 | 0% Низкий | больше 3 лет назад |
| CVE-2018-17450 An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Server-Side Request Forgery (SSRF) via the Kubernetes integration, leading (for example) to disclosure of a GCP service token. | CVSS3: 4.3 | 0% Низкий | больше 3 лет назад |
| CVE-2018-17449 An issue was discovered in GitLab Community and Enterprise Edition bef ... | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
| CVE-2018-17449 An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Remote attackers could obtain sensitive information about issues, comments, and project titles via events API insecure direct object reference. | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
| CVE-2018-15472 An issue was discovered in GitLab Community and Enterprise Edition bef ... | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
| CVE-2018-15472 An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. The diff formatter using rouge can block for a long time in Sidekiq jobs without any timeout. | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
Уязвимостей на страницу