Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 17.0.8 | 17.0.8 | ||
| 17.0.7 | 17.0.7 | ||
| 17.0.6 | 17.0.6 | ||
| 17.0.5 | 17.0.5 | ||
| 17.0.4 | 17.0.4 | ||
| 17.0.3 | 17.0.3 | ||
| 17.0.2 | 17.0.2 | ||
| 17.0.1 | 17.0.1 | ||
| 17.0.0 | 17.0.0 |
Показывать по
Количество 5 943
CVE-2021-39888
In all versions of GitLab EE starting from 13.10 before 14.1.7, all versions starting from 14.2 before 14.2.5, and all versions starting from 14.3 before 14.3.1 a specific API endpoint may reveal details about a private group and other sensitive info inside issue and merge request templates.
CVE-2021-39888
In all versions of GitLab EE starting from 13.10 before 14.1.7, all ve ...
CVE-2021-39884
In all versions of GitLab EE since version 8.13, an endpoint discloses names of private groups that have access to a project to low privileged users that are part of that project.
CVE-2021-39884
In all versions of GitLab EE since version 8.13, an endpoint discloses ...
CVE-2021-39882
In all versions of GitLab CE/EE, provided a user ID, anonymous users can use a few endpoints to retrieve information about any GitLab user.
CVE-2021-39882
In all versions of GitLab CE/EE, provided a user ID, anonymous users c ...
CVE-2021-39878
A stored Reflected Cross-Site Scripting vulnerability in the Jira integration in GitLab version 13.0 up to 14.3.1 allowed an attacker to execute arbitrary javascript code.
CVE-2021-39878
A stored Reflected Cross-Site Scripting vulnerability in the Jira inte ...
CVE-2021-39875
In all versions of GitLab CE/EE since version 13.6, it is possible to see pending invitations of any public group or public project by visiting an API endpoint.
CVE-2021-39875
In all versions of GitLab CE/EE since version 13.6, it is possible to ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2021-39888 In all versions of GitLab EE starting from 13.10 before 14.1.7, all versions starting from 14.2 before 14.2.5, and all versions starting from 14.3 before 14.3.1 a specific API endpoint may reveal details about a private group and other sensitive info inside issue and merge request templates. | CVSS3: 4.3 | 1% Низкий | почти 5 лет назад |
| CVE-2021-39888 In all versions of GitLab EE starting from 13.10 before 14.1.7, all ve ... | CVSS3: 4.3 | 1% Низкий | почти 5 лет назад |
| CVE-2021-39884 In all versions of GitLab EE since version 8.13, an endpoint discloses names of private groups that have access to a project to low privileged users that are part of that project. | CVSS3: 4.3 | 1% Низкий | почти 5 лет назад |
| CVE-2021-39884 In all versions of GitLab EE since version 8.13, an endpoint discloses ... | CVSS3: 4.3 | 1% Низкий | почти 5 лет назад |
| CVE-2021-39882 In all versions of GitLab CE/EE, provided a user ID, anonymous users can use a few endpoints to retrieve information about any GitLab user. | CVSS3: 5.3 | 1% Низкий | почти 5 лет назад |
| CVE-2021-39882 In all versions of GitLab CE/EE, provided a user ID, anonymous users c ... | CVSS3: 5.3 | 1% Низкий | почти 5 лет назад |
| CVE-2021-39878 A stored Reflected Cross-Site Scripting vulnerability in the Jira integration in GitLab version 13.0 up to 14.3.1 allowed an attacker to execute arbitrary javascript code. | CVSS3: 5.8 | 1% Низкий | почти 5 лет назад |
| CVE-2021-39878 A stored Reflected Cross-Site Scripting vulnerability in the Jira inte ... | CVSS3: 5.8 | 1% Низкий | почти 5 лет назад |
| CVE-2021-39875 In all versions of GitLab CE/EE since version 13.6, it is possible to see pending invitations of any public group or public project by visiting an API endpoint. | CVSS3: 5.3 | 1% Низкий | почти 5 лет назад |
| CVE-2021-39875 In all versions of GitLab CE/EE since version 13.6, it is possible to ... | CVSS3: 5.3 | 1% Низкий | почти 5 лет назад |
Уязвимостей на страницу