Логотип exploitDog
product: "gitlab"
Консоль
Логотип exploitDog

exploitDog

product: "gitlab"
Gitlab

Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.

Релизный цикл, информация об уязвимостях

Продукт: Gitlab
Вендор: gitlab

График релизов

18.618.718.8202520262027

Недавние уязвимости Gitlab

Количество 5 268

ubuntu логотип

CVE-2017-17716

около 8 лет назад

GitLab 9.4.x before 9.4.2 does not support LDAP SSL certificate verification, but a verify_certificates LDAP option was mentioned in the 9.4 release announcement. This issue occurred because code was not merged. This is related to use of the omniauth-ldap library and the gitlab_omniauth-ldap gem.

CVSS3: 5.9
EPSS: Низкий
nvd логотип

CVE-2017-12426

больше 8 лет назад

GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2017-12426

больше 8 лет назад

GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17. ...

CVSS3: 8.8
EPSS: Низкий
ubuntu логотип

CVE-2017-12426

больше 8 лет назад

GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import.

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2017-11438

больше 8 лет назад

GitLab Community Edition (CE) and Enterprise Edition (EE) before 9.0.11, 9.1.8, 9.2.8 allow an authenticated user with the ability to create a group to add themselves to any project that is inside a subgroup.

CVSS3: 6.3
EPSS: Низкий
debian логотип

CVE-2017-11438

больше 8 лет назад

GitLab Community Edition (CE) and Enterprise Edition (EE) before 9.0.1 ...

CVSS3: 6.3
EPSS: Низкий
nvd логотип

CVE-2017-11437

больше 8 лет назад

GitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an authenticated user with the ability to create a project to use the mirroring feature to potentially read repositories belonging to other users.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2017-11437

больше 8 лет назад

GitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, an ...

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2017-11437

больше 8 лет назад

GitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an authenticated user with the ability to create a project to use the mirroring feature to potentially read repositories belonging to other users.

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2017-11438

больше 8 лет назад

GitLab Community Edition (CE) and Enterprise Edition (EE) before 9.0.11, 9.1.8, 9.2.8 allow an authenticated user with the ability to create a group to add themselves to any project that is inside a subgroup.

CVSS3: 6.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
ubuntu логотип
CVE-2017-17716

GitLab 9.4.x before 9.4.2 does not support LDAP SSL certificate verification, but a verify_certificates LDAP option was mentioned in the 9.4 release announcement. This issue occurred because code was not merged. This is related to use of the omniauth-ldap library and the gitlab_omniauth-ldap gem.

CVSS3: 5.9
0%
Низкий
около 8 лет назад
nvd логотип
CVE-2017-12426

GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import.

CVSS3: 8.8
1%
Низкий
больше 8 лет назад
debian логотип
CVE-2017-12426

GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17. ...

CVSS3: 8.8
1%
Низкий
больше 8 лет назад
ubuntu логотип
CVE-2017-12426

GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import.

CVSS3: 8.8
1%
Низкий
больше 8 лет назад
nvd логотип
CVE-2017-11438

GitLab Community Edition (CE) and Enterprise Edition (EE) before 9.0.11, 9.1.8, 9.2.8 allow an authenticated user with the ability to create a group to add themselves to any project that is inside a subgroup.

CVSS3: 6.3
0%
Низкий
больше 8 лет назад
debian логотип
CVE-2017-11438

GitLab Community Edition (CE) and Enterprise Edition (EE) before 9.0.1 ...

CVSS3: 6.3
0%
Низкий
больше 8 лет назад
nvd логотип
CVE-2017-11437

GitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an authenticated user with the ability to create a project to use the mirroring feature to potentially read repositories belonging to other users.

CVSS3: 6.5
0%
Низкий
больше 8 лет назад
debian логотип
CVE-2017-11437

GitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, an ...

CVSS3: 6.5
0%
Низкий
больше 8 лет назад
ubuntu логотип
CVE-2017-11437

GitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an authenticated user with the ability to create a project to use the mirroring feature to potentially read repositories belonging to other users.

CVSS3: 6.5
0%
Низкий
больше 8 лет назад
ubuntu логотип
CVE-2017-11438

GitLab Community Edition (CE) and Enterprise Edition (EE) before 9.0.11, 9.1.8, 9.2.8 allow an authenticated user with the ability to create a group to add themselves to any project that is inside a subgroup.

CVSS3: 6.3
0%
Низкий
больше 8 лет назад

Уязвимостей на страницу

Поделиться