Логотип exploitDog
product: "gitlab"
Консоль
Логотип exploitDog

exploitDog

product: "gitlab"
Gitlab

Gitlabвеб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.

Релизный цикл, информация об уязвимостях

Продукт: Gitlab
Вендор: gitlab

График релизов

18.618.718.8202520262027

Недавние уязвимости Gitlab

Количество 5 336

debian логотип

CVE-2020-13263

больше 5 лет назад

An authorization issue relating to project maintainer impersonation wa ...

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2020-13261

больше 5 лет назад

Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other administrators to view Amazon EKS credentials via HTML source code

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2020-13261

больше 5 лет назад

Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later throu ...

CVSS3: 5.3
EPSS: Низкий
ubuntu логотип

CVE-2020-13261

больше 5 лет назад

Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other administrators to view Amazon EKS credentials via HTML source code

CVSS3: 5.3
EPSS: Низкий
ubuntu логотип

CVE-2020-13264

больше 5 лет назад

Kubernetes cluster token disclosure in GitLab CE/EE 10.3 and later through 13.0.1 allows other group maintainers to view Kubernetes cluster token

CVSS3: 5.3
EPSS: Низкий
ubuntu логотип

CVE-2020-13263

больше 5 лет назад

An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perform limited actions.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2020-13276

больше 5 лет назад

User is allowed to set an email as a notification email even without verifying the new email in all previous GitLab CE/EE versions through 13.0.1

CVSS3: 7.4
EPSS: Низкий
debian логотип

CVE-2020-13276

больше 5 лет назад

User is allowed to set an email as a notification email even without v ...

CVSS3: 7.4
EPSS: Низкий
nvd логотип

CVE-2020-13275

больше 5 лет назад

A user with an unverified email address could request an access to domain restricted groups in GitLab EE 12.2 and later through 13.0.1

CVSS3: 8
EPSS: Низкий
debian логотип

CVE-2020-13275

больше 5 лет назад

A user with an unverified email address could request an access to dom ...

CVSS3: 8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
debian логотип
CVE-2020-13263

An authorization issue relating to project maintainer impersonation wa ...

CVSS3: 7.5
0%
Низкий
больше 5 лет назад
nvd логотип
CVE-2020-13261

Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other administrators to view Amazon EKS credentials via HTML source code

CVSS3: 5.3
0%
Низкий
больше 5 лет назад
debian логотип
CVE-2020-13261

Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later throu ...

CVSS3: 5.3
0%
Низкий
больше 5 лет назад
ubuntu логотип
CVE-2020-13261

Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other administrators to view Amazon EKS credentials via HTML source code

CVSS3: 5.3
0%
Низкий
больше 5 лет назад
ubuntu логотип
CVE-2020-13264

Kubernetes cluster token disclosure in GitLab CE/EE 10.3 and later through 13.0.1 allows other group maintainers to view Kubernetes cluster token

CVSS3: 5.3
0%
Низкий
больше 5 лет назад
ubuntu логотип
CVE-2020-13263

An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perform limited actions.

CVSS3: 7.5
0%
Низкий
больше 5 лет назад
nvd логотип
CVE-2020-13276

User is allowed to set an email as a notification email even without verifying the new email in all previous GitLab CE/EE versions through 13.0.1

CVSS3: 7.4
0%
Низкий
больше 5 лет назад
debian логотип
CVE-2020-13276

User is allowed to set an email as a notification email even without v ...

CVSS3: 7.4
0%
Низкий
больше 5 лет назад
nvd логотип
CVE-2020-13275

A user with an unverified email address could request an access to domain restricted groups in GitLab EE 12.2 and later through 13.0.1

CVSS3: 8
0%
Низкий
больше 5 лет назад
debian логотип
CVE-2020-13275

A user with an unverified email address could request an access to dom ...

CVSS3: 8
0%
Низкий
больше 5 лет назад

Уязвимостей на страницу


Поделиться