Логотип exploitDog
product: "gitlab"
Консоль
Логотип exploitDog

exploitDog

product: "gitlab"
Gitlab

Gitlabвеб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.

Релизный цикл, информация об уязвимостях

Продукт: Gitlab
Вендор: gitlab

График релизов

18.518.618.7202520262027

Недавние уязвимости Gitlab

Количество 5 237

ubuntu логотип

CVE-2019-6790

больше 6 лет назад

An Incorrect Access Control (issue 2 of 3) issue was discovered in GitLab Community and Enterprise Edition 8.14 and later but before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. Guest users were able to view the list of a group's merge requests.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2019-10112

больше 6 лет назад

An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The construction of the HMAC key was insecurely derived.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2019-10112

больше 6 лет назад

An issue was discovered in GitLab Community and Enterprise Edition bef ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2019-10112

больше 6 лет назад

An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The construction of the HMAC key was insecurely derived.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2019-10117

больше 6 лет назад

An Open Redirect issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. A redirect is triggered after successful authentication within the Oauth/:GeoAuthController for the secondary Geo node.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2019-10117

больше 6 лет назад

An Open Redirect issue was discovered in GitLab Community and Enterpri ...

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2019-10116

больше 6 лет назад

An Insecure Permissions issue (issue 3 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. Guests of a project were allowed to see Related Branches created for an issue.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2019-10116

больше 6 лет назад

An Insecure Permissions issue (issue 3 of 3) was discovered in GitLab ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2019-10115

больше 6 лет назад

An Insecure Permissions issue (issue 2 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The GitLab Releases feature could allow guest users access to private information like release details and code information.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2019-10115

больше 6 лет назад

An Insecure Permissions issue (issue 2 of 3) was discovered in GitLab ...

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
ubuntu логотип
CVE-2019-6790

An Incorrect Access Control (issue 2 of 3) issue was discovered in GitLab Community and Enterprise Edition 8.14 and later but before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. Guest users were able to view the list of a group's merge requests.

CVSS3: 4.3
0%
Низкий
больше 6 лет назад
nvd логотип
CVE-2019-10112

An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The construction of the HMAC key was insecurely derived.

CVSS3: 7.5
0%
Низкий
больше 6 лет назад
debian логотип
CVE-2019-10112

An issue was discovered in GitLab Community and Enterprise Edition bef ...

CVSS3: 7.5
0%
Низкий
больше 6 лет назад
ubuntu логотип
CVE-2019-10112

An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The construction of the HMAC key was insecurely derived.

CVSS3: 7.5
0%
Низкий
больше 6 лет назад
nvd логотип
CVE-2019-10117

An Open Redirect issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. A redirect is triggered after successful authentication within the Oauth/:GeoAuthController for the secondary Geo node.

CVSS3: 6.1
0%
Низкий
больше 6 лет назад
debian логотип
CVE-2019-10117

An Open Redirect issue was discovered in GitLab Community and Enterpri ...

CVSS3: 6.1
0%
Низкий
больше 6 лет назад
nvd логотип
CVE-2019-10116

An Insecure Permissions issue (issue 3 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. Guests of a project were allowed to see Related Branches created for an issue.

CVSS3: 4.3
0%
Низкий
больше 6 лет назад
debian логотип
CVE-2019-10116

An Insecure Permissions issue (issue 3 of 3) was discovered in GitLab ...

CVSS3: 4.3
0%
Низкий
больше 6 лет назад
nvd логотип
CVE-2019-10115

An Insecure Permissions issue (issue 2 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The GitLab Releases feature could allow guest users access to private information like release details and code information.

CVSS3: 6.5
0%
Низкий
больше 6 лет назад
debian логотип
CVE-2019-10115

An Insecure Permissions issue (issue 2 of 3) was discovered in GitLab ...

CVSS3: 6.5
0%
Низкий
больше 6 лет назад

Уязвимостей на страницу


Поделиться