Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 17.0.8 | 17.0.8 | ||
| 17.0.7 | 17.0.7 | ||
| 17.0.6 | 17.0.6 | ||
| 17.0.5 | 17.0.5 | ||
| 17.0.4 | 17.0.4 | ||
| 17.0.3 | 17.0.3 | ||
| 17.0.2 | 17.0.2 | ||
| 17.0.1 | 17.0.1 | ||
| 17.0.0 | 17.0.0 |
Показывать по
Количество 5 943
CVE-2020-13342
An issue has been discovered in GitLab affecting versions prior to 13. ...
CVE-2020-13342
An issue has been discovered in GitLab affecting versions prior to 13.2.10, 13.3.7 and 13.4.2: Lack of Rate Limiting at Re-Sending Confirmation Email
CVE-2020-13347
A command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3.2 and 13.4.1. When the runner is configured on a Windows system with a docker executor, which allows the attacker to run arbitrary commands on Windows host, via DOCKER_AUTH_CONFIG build variable.
CVE-2020-13347
A command injection vulnerability was discovered in Gitlab runner vers ...
CVE-2020-13346
Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential issues through API.
CVE-2020-13346
Membership changes are not reflected in ToDo subscriptions in GitLab v ...
CVE-2020-13335
Improper group membership validation when deleting a user account in GitLab >=7.12 allows a user to delete own account without deleting/transferring their group.
CVE-2020-13335
Improper group membership validation when deleting a user account in G ...
CVE-2020-13334
In GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, improper authorization checks allow a non-member of a project/group to change the confidentiality attribute of issue via mutation GraphQL query
CVE-2020-13334
In GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, improper autho ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2020-13342 An issue has been discovered in GitLab affecting versions prior to 13. ... | CVSS3: 2.7 | 1% Низкий | почти 6 лет назад |
 | CVE-2020-13342 An issue has been discovered in GitLab affecting versions prior to 13.2.10, 13.3.7 and 13.4.2: Lack of Rate Limiting at Re-Sending Confirmation Email | CVSS3: 2.7 | 1% Низкий | почти 6 лет назад |
 | CVE-2020-13347 A command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3.2 and 13.4.1. When the runner is configured on a Windows system with a docker executor, which allows the attacker to run arbitrary commands on Windows host, via DOCKER_AUTH_CONFIG build variable. | CVSS3: 9.1 | 2% Низкий | почти 6 лет назад |
| CVE-2020-13347 A command injection vulnerability was discovered in Gitlab runner vers ... | CVSS3: 9.1 | 2% Низкий | почти 6 лет назад |
| CVE-2020-13346 Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential issues through API. | CVSS3: 6.5 | 1% Низкий | почти 6 лет назад |
| CVE-2020-13346 Membership changes are not reflected in ToDo subscriptions in GitLab v ... | CVSS3: 6.5 | 1% Низкий | почти 6 лет назад |
| CVE-2020-13335 Improper group membership validation when deleting a user account in GitLab >=7.12 allows a user to delete own account without deleting/transferring their group. | CVSS3: 4.3 | 1% Низкий | почти 6 лет назад |
| CVE-2020-13335 Improper group membership validation when deleting a user account in G ... | CVSS3: 4.3 | 1% Низкий | почти 6 лет назад |
| CVE-2020-13334 In GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, improper authorization checks allow a non-member of a project/group to change the confidentiality attribute of issue via mutation GraphQL query | CVSS3: 5.9 | 2% Низкий | почти 6 лет назад |
| CVE-2020-13334 In GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, improper autho ... | CVSS3: 5.9 | 2% Низкий | почти 6 лет назад |
Уязвимостей на страницу