Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Количество 5 336
CVE-2020-10952
GitLab EE/CE 8.11 through 12.9.1 allows blocked users to pull/push doc ...
CVE-2020-10956
GitLab 8.10 and later through 12.9 is vulnerable to an SSRF in a project import note feature.
CVE-2020-10955
GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content available under specific folders.
CVE-2020-10954
GitLab through 12.9 is affected by a potential DoS in repository archive download.
CVE-2020-10952
GitLab EE/CE 8.11 through 12.9.1 allows blocked users to pull/push docker images.
CVE-2020-10953
In GitLab EE 11.7 through 12.9, the NPM feature is vulnerable to a path traversal issue.
BDU:2020-03963
Уязвимость системы управления репозиториями кода Gitlab, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальным данным
CVE-2020-10077
GitLab EE 3.0 through 12.8.1 allows SSRF. An internal investigation revealed that a particular deprecated service was creating a server side request forgery risk.
CVE-2020-10077
GitLab EE 3.0 through 12.8.1 allows SSRF. An internal investigation re ...
CVE-2020-10076
GitLab 12.1 through 12.8.1 allows XSS. A stored cross-site scripting vulnerability was discovered when displaying merge requests.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2020-10952 GitLab EE/CE 8.11 through 12.9.1 allows blocked users to pull/push doc ... | CVSS3: 6.5 | 0% Низкий | почти 6 лет назад |
 | CVE-2020-10956 GitLab 8.10 and later through 12.9 is vulnerable to an SSRF in a project import note feature. | CVSS3: 9.8 | 0% Низкий | почти 6 лет назад |
| CVE-2020-10955 GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content available under specific folders. | CVSS3: 6.5 | 0% Низкий | почти 6 лет назад |
| CVE-2020-10954 GitLab through 12.9 is affected by a potential DoS in repository archive download. | CVSS3: 7.5 | 0% Низкий | почти 6 лет назад |
| CVE-2020-10952 GitLab EE/CE 8.11 through 12.9.1 allows blocked users to pull/push docker images. | CVSS3: 6.5 | 0% Низкий | почти 6 лет назад |
| CVE-2020-10953 In GitLab EE 11.7 through 12.9, the NPM feature is vulnerable to a path traversal issue. | CVSS3: 7.5 | 0% Низкий | почти 6 лет назад |
 | BDU:2020-03963 Уязвимость системы управления репозиториями кода Gitlab, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальным данным | CVSS3: 6.5 | 0% Низкий | почти 6 лет назад |
 | CVE-2020-10077 GitLab EE 3.0 through 12.8.1 allows SSRF. An internal investigation revealed that a particular deprecated service was creating a server side request forgery risk. | CVSS3: 9.8 | 0% Низкий | почти 6 лет назад |
| CVE-2020-10077 GitLab EE 3.0 through 12.8.1 allows SSRF. An internal investigation re ... | CVSS3: 9.8 | 0% Низкий | почти 6 лет назад |
| CVE-2020-10076 GitLab 12.1 through 12.8.1 allows XSS. A stored cross-site scripting vulnerability was discovered when displaying merge requests. | CVSS3: 6.1 | 0% Низкий | почти 6 лет назад |
Уязвимостей на страницу