Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Количество 5 203
CVE-2019-6786
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control (issue 1 of 3). The contents of an LFS object can be accessed by an unauthorized user, if the file size and OID are known.
CVE-2019-6786
An issue was discovered in GitLab Community and Enterprise Edition bef ...
CVE-2019-6785
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Denial of Service. Inputting an overly long string into a Markdown field could cause a denial of service.
CVE-2019-6785
An issue was discovered in GitLab Community and Enterprise Edition bef ...
CVE-2019-6784
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows XSS (issue 1 of 2). Markdown fields contain a lack of input validation and output encoding when processing KaTeX that results in a persistent XSS.
CVE-2019-6784
An issue was discovered in GitLab Community and Enterprise Edition bef ...
CVE-2019-6783
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. GitLab Pages contains a directory traversal vulnerability that could lead to remote command execution.
CVE-2019-6783
An issue was discovered in GitLab Community and Enterprise Edition bef ...
CVE-2019-6782
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure (issue 1 of 6). An authorization issue allows the contributed project information of a private profile to be viewed.
CVE-2019-6782
An issue was discovered in GitLab Community and Enterprise Edition bef ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2019-6786 An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control (issue 1 of 3). The contents of an LFS object can be accessed by an unauthorized user, if the file size and OID are known. | CVSS3: 6.5 | 0% Низкий | больше 6 лет назад |
| CVE-2019-6786 An issue was discovered in GitLab Community and Enterprise Edition bef ... | CVSS3: 6.5 | 0% Низкий | больше 6 лет назад |
| CVE-2019-6785 An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Denial of Service. Inputting an overly long string into a Markdown field could cause a denial of service. | CVSS3: 6.5 | 0% Низкий | больше 6 лет назад |
| CVE-2019-6785 An issue was discovered in GitLab Community and Enterprise Edition bef ... | CVSS3: 6.5 | 0% Низкий | больше 6 лет назад |
| CVE-2019-6784 An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows XSS (issue 1 of 2). Markdown fields contain a lack of input validation and output encoding when processing KaTeX that results in a persistent XSS. | CVSS3: 6.1 | 0% Низкий | больше 6 лет назад |
| CVE-2019-6784 An issue was discovered in GitLab Community and Enterprise Edition bef ... | CVSS3: 6.1 | 0% Низкий | больше 6 лет назад |
| CVE-2019-6783 An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. GitLab Pages contains a directory traversal vulnerability that could lead to remote command execution. | CVSS3: 8.8 | 2% Низкий | больше 6 лет назад |
| CVE-2019-6783 An issue was discovered in GitLab Community and Enterprise Edition bef ... | CVSS3: 8.8 | 2% Низкий | больше 6 лет назад |
| CVE-2019-6782 An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure (issue 1 of 6). An authorization issue allows the contributed project information of a private profile to be viewed. | CVSS3: 7.5 | 0% Низкий | больше 6 лет назад |
| CVE-2019-6782 An issue was discovered in GitLab Community and Enterprise Edition bef ... | CVSS3: 7.5 | 0% Низкий | больше 6 лет назад |
Уязвимостей на страницу