Логотип exploitDog
product: "gitlab"
Консоль
Логотип exploitDog

exploitDog

product: "gitlab"
Gitlab

Gitlabвеб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.

Релизный цикл, информация об уязвимостях

Продукт: Gitlab
Вендор: gitlab

График релизов

18.618.718.8202520262027

Недавние уязвимости Gitlab

Количество 5 304

nvd логотип

CVE-2019-15583

около 6 лет назад

An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE). When an issue was moved to a public project from a private one, the associated private labels and the private project namespace would be disclosed through the GitLab API.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2019-15583

около 6 лет назад

An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 ...

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2019-15582

около 6 лет назад

An IDOR was discovered in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that allowed a maintainer to add any private group to a protected environment.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2019-15582

около 6 лет назад

An IDOR was discovered in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab ...

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2019-15581

около 6 лет назад

An IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that allowed a project owner or maintainer to see the members of any private group via merge request approval rules.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2019-15581

около 6 лет назад

An IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Communi ...

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2019-15579

около 6 лет назад

An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) where the assignee(s) of a confidential issue in a private project would be disclosed to a guest via milestones.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2019-15579

около 6 лет назад

An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 ...

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2019-15578

около 6 лет назад

An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE). The path of a private project, that used to be public, would be disclosed in the unsubscribe email link of issues and merge requests.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2019-15578

около 6 лет назад

An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 ...

CVSS3: 5.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2019-15583

An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE). When an issue was moved to a public project from a private one, the associated private labels and the private project namespace would be disclosed through the GitLab API.

CVSS3: 7.5
0%
Низкий
около 6 лет назад
debian логотип
CVE-2019-15583

An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 ...

CVSS3: 7.5
0%
Низкий
около 6 лет назад
nvd логотип
CVE-2019-15582

An IDOR was discovered in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that allowed a maintainer to add any private group to a protected environment.

CVSS3: 5.3
0%
Низкий
около 6 лет назад
debian логотип
CVE-2019-15582

An IDOR was discovered in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab ...

CVSS3: 5.3
0%
Низкий
около 6 лет назад
nvd логотип
CVE-2019-15581

An IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that allowed a project owner or maintainer to see the members of any private group via merge request approval rules.

CVSS3: 5.3
0%
Низкий
около 6 лет назад
debian логотип
CVE-2019-15581

An IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Communi ...

CVSS3: 5.3
0%
Низкий
около 6 лет назад
nvd логотип
CVE-2019-15579

An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) where the assignee(s) of a confidential issue in a private project would be disclosed to a guest via milestones.

CVSS3: 5.3
0%
Низкий
около 6 лет назад
debian логотип
CVE-2019-15579

An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 ...

CVSS3: 5.3
0%
Низкий
около 6 лет назад
nvd логотип
CVE-2019-15578

An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE). The path of a private project, that used to be public, would be disclosed in the unsubscribe email link of issues and merge requests.

CVSS3: 5.3
0%
Низкий
около 6 лет назад
debian логотип
CVE-2019-15578

An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 ...

CVSS3: 5.3
0%
Низкий
около 6 лет назад

Уязвимостей на страницу


Поделиться