Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Количество 5 203
CVE-2019-6997
An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting in 10.7) and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. System notes contain an access control issue that permits a guest user to view merge request titles.
CVE-2019-6997
An issue was discovered in GitLab Community and Enterprise Edition 10. ...
CVE-2019-6996
An issue was discovered in GitLab Enterprise Edition 10.x (starting in 10.6) and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. The merge request approvers section has an access control issue that permits project maintainers to view membership of private groups.
CVE-2019-6996
An issue was discovered in GitLab Enterprise Edition 10.x (starting in ...
CVE-2019-6995
An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. Users are able to comment on locked project issues.
CVE-2019-6995
An issue was discovered in GitLab Community and Enterprise Edition 8.x ...
CVE-2019-6960
An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. Access to the internal wiki is permitted when an external wiki service is enabled.
CVE-2019-6960
An issue was discovered in GitLab Community and Enterprise Edition 9.x ...
CVE-2019-6795
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Insufficient Visual Distinction of Homoglyphs Presented to a User. IDN homographs and RTLO characters are rendered to unicode, which could be used for social engineering.
CVE-2019-6795
An issue was discovered in GitLab Community and Enterprise Edition bef ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
CVE-2019-6997 An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting in 10.7) and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. System notes contain an access control issue that permits a guest user to view merge request titles. | CVSS3: 4.3 | 0% Низкий | больше 6 лет назад | |
CVE-2019-6997 An issue was discovered in GitLab Community and Enterprise Edition 10. ... | CVSS3: 4.3 | 0% Низкий | больше 6 лет назад | |
CVE-2019-6996 An issue was discovered in GitLab Enterprise Edition 10.x (starting in 10.6) and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. The merge request approvers section has an access control issue that permits project maintainers to view membership of private groups. | CVSS3: 4.3 | 0% Низкий | больше 6 лет назад | |
CVE-2019-6996 An issue was discovered in GitLab Enterprise Edition 10.x (starting in ... | CVSS3: 4.3 | 0% Низкий | больше 6 лет назад | |
CVE-2019-6995 An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. Users are able to comment on locked project issues. | CVSS3: 6.5 | 0% Низкий | больше 6 лет назад | |
CVE-2019-6995 An issue was discovered in GitLab Community and Enterprise Edition 8.x ... | CVSS3: 6.5 | 0% Низкий | больше 6 лет назад | |
CVE-2019-6960 An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. Access to the internal wiki is permitted when an external wiki service is enabled. | CVSS3: 9.8 | 1% Низкий | больше 6 лет назад | |
CVE-2019-6960 An issue was discovered in GitLab Community and Enterprise Edition 9.x ... | CVSS3: 9.8 | 1% Низкий | больше 6 лет назад | |
CVE-2019-6795 An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Insufficient Visual Distinction of Homoglyphs Presented to a User. IDN homographs and RTLO characters are rendered to unicode, which could be used for social engineering. | CVSS3: 5.4 | 0% Низкий | больше 6 лет назад | |
CVE-2019-6795 An issue was discovered in GitLab Community and Enterprise Edition bef ... | CVSS3: 5.4 | 0% Низкий | больше 6 лет назад |
Уязвимостей на страницу