Логотип exploitDog
product: "gitlab"
Консоль
Логотип exploitDog

exploitDog

product: "gitlab"
Gitlab

Gitlabвеб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.

Релизный цикл, информация об уязвимостях

Продукт: Gitlab
Вендор: gitlab

График релизов

18.618.718.8202520262027

Недавние уязвимости Gitlab

Количество 5 304

nvd логотип

CVE-2019-5464

около 6 лет назад

A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which could result in SSRF where the library is utilized.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2019-5464

около 6 лет назад

A flawed DNS rebinding protection issue was discovered in GitLab CE/EE ...

CVSS3: 9.8
EPSS: Низкий
nvd логотип

CVE-2019-5462

около 6 лет назад

A privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are not rotated once ownership of them has changed.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2019-5462

около 6 лет назад

A privilege escalation issue was discovered in GitLab CE/EE 9.0 and la ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2019-15590

около 6 лет назад

An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE) and Enterprise Edition (EE) where private merge requests and issues would be disclosed with the Group Search feature provided by Elasticsearch integration

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2019-15590

около 6 лет назад

An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 fo ...

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2019-15586

около 6 лет назад

A XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2019-15586

около 6 лет назад

A XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2019-15585

около 6 лет назад

Improper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) in the GitLab SAML integration had a validation issue that permitted an attacker to takeover another user's account.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2019-15585

около 6 лет назад

Improper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 fo ...

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2019-5464

A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which could result in SSRF where the library is utilized.

CVSS3: 9.8
0%
Низкий
около 6 лет назад
debian логотип
CVE-2019-5464

A flawed DNS rebinding protection issue was discovered in GitLab CE/EE ...

CVSS3: 9.8
0%
Низкий
около 6 лет назад
nvd логотип
CVE-2019-5462

A privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are not rotated once ownership of them has changed.

CVSS3: 8.8
0%
Низкий
около 6 лет назад
debian логотип
CVE-2019-5462

A privilege escalation issue was discovered in GitLab CE/EE 9.0 and la ...

CVSS3: 8.8
0%
Низкий
около 6 лет назад
nvd логотип
CVE-2019-15590

An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE) and Enterprise Edition (EE) where private merge requests and issues would be disclosed with the Group Search feature provided by Elasticsearch integration

CVSS3: 7.5
0%
Низкий
около 6 лет назад
debian логотип
CVE-2019-15590

An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 fo ...

CVSS3: 7.5
0%
Низкий
около 6 лет назад
nvd логотип
CVE-2019-15586

A XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin.

CVSS3: 6.1
0%
Низкий
около 6 лет назад
debian логотип
CVE-2019-15586

A XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin.

CVSS3: 6.1
0%
Низкий
около 6 лет назад
nvd логотип
CVE-2019-15585

Improper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) in the GitLab SAML integration had a validation issue that permitted an attacker to takeover another user's account.

CVSS3: 9.8
0%
Низкий
около 6 лет назад
debian логотип
CVE-2019-15585

Improper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 fo ...

CVSS3: 9.8
0%
Низкий
около 6 лет назад

Уязвимостей на страницу


Поделиться