Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Количество 5 336
CVE-2020-11649
An issue was discovered in GitLab CE and EE 8.15 through 12.9.2. Members of a group could still have access after the group is deleted.
CVE-2020-11649
An issue was discovered in GitLab CE and EE 8.15 through 12.9.2. Membe ...
CVE-2020-11506
An issue was discovered in GitLab 10.7.0 and later through 12.9.2. A Workhorse bypass could lead to job artifact uploads and file disclosure (Exposure of Sensitive Information) via request smuggling.
CVE-2020-11506
An issue was discovered in GitLab 10.7.0 and later through 12.9.2. A W ...
CVE-2020-11505
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3. A Workhorse bypass could lead to NuGet package and file disclosure (Exposure of Sensitive Information) via request smuggling.
CVE-2020-11505
An issue was discovered in GitLab Community Edition (CE) and Enterpris ...
CVE-2020-11505
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3. A Workhorse bypass could lead to NuGet package and file disclosure (Exposure of Sensitive Information) via request smuggling.
CVE-2020-11649
An issue was discovered in GitLab CE and EE 8.15 through 12.9.2. Members of a group could still have access after the group is deleted.
CVE-2020-11506
An issue was discovered in GitLab 10.7.0 and later through 12.9.2. A Workhorse bypass could lead to job artifact uploads and file disclosure (Exposure of Sensitive Information) via request smuggling.
CVE-2020-10981
GitLab EE/CE 9.0 to 12.9 allows a maintainer to modify other maintainers' pipeline trigger descriptions within the same project.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
CVE-2020-11649 An issue was discovered in GitLab CE and EE 8.15 through 12.9.2. Members of a group could still have access after the group is deleted. | CVSS3: 6.5 | 0% Низкий | почти 6 лет назад | |
CVE-2020-11649 An issue was discovered in GitLab CE and EE 8.15 through 12.9.2. Membe ... | CVSS3: 6.5 | 0% Низкий | почти 6 лет назад | |
CVE-2020-11506 An issue was discovered in GitLab 10.7.0 and later through 12.9.2. A Workhorse bypass could lead to job artifact uploads and file disclosure (Exposure of Sensitive Information) via request smuggling. | CVSS3: 7.5 | 0% Низкий | почти 6 лет назад | |
CVE-2020-11506 An issue was discovered in GitLab 10.7.0 and later through 12.9.2. A W ... | CVSS3: 7.5 | 0% Низкий | почти 6 лет назад | |
CVE-2020-11505 An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3. A Workhorse bypass could lead to NuGet package and file disclosure (Exposure of Sensitive Information) via request smuggling. | CVSS3: 7.5 | 0% Низкий | почти 6 лет назад | |
CVE-2020-11505 An issue was discovered in GitLab Community Edition (CE) and Enterpris ... | CVSS3: 7.5 | 0% Низкий | почти 6 лет назад | |
CVE-2020-11505 An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3. A Workhorse bypass could lead to NuGet package and file disclosure (Exposure of Sensitive Information) via request smuggling. | CVSS3: 7.5 | 0% Низкий | почти 6 лет назад | |
CVE-2020-11649 An issue was discovered in GitLab CE and EE 8.15 through 12.9.2. Members of a group could still have access after the group is deleted. | CVSS3: 6.5 | 0% Низкий | почти 6 лет назад | |
CVE-2020-11506 An issue was discovered in GitLab 10.7.0 and later through 12.9.2. A Workhorse bypass could lead to job artifact uploads and file disclosure (Exposure of Sensitive Information) via request smuggling. | CVSS3: 7.5 | 0% Низкий | почти 6 лет назад | |
CVE-2020-10981 GitLab EE/CE 9.0 to 12.9 allows a maintainer to modify other maintainers' pipeline trigger descriptions within the same project. | CVSS3: 4.3 | 0% Низкий | почти 6 лет назад |
Уязвимостей на страницу