Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Gitlab

Gitlabвеб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.

Релизный цикл, информация об уязвимостях

Продукт: Gitlab
Вендор: gitlab

График релизов

19.019.119.220262027

Релизные элементы

KBВерсияБилдДата доступности
17.0.817.0.8
17.0.717.0.7
17.0.617.0.6
17.0.517.0.5
17.0.417.0.4
17.0.317.0.3
17.0.217.0.2
17.0.117.0.1
17.0.017.0.0

Показывать по

Недавние уязвимости Gitlab

Количество 5 920

ubuntu логотип

CVE-2019-15736

почти 7 лет назад

An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Under certain circumstances, CI pipelines could potentially be used in a denial of service attack.

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2019-15737

почти 7 лет назад

An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Certain account actions needed improved authentication and session management.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2019-15733

почти 7 лет назад

An issue was discovered in GitLab Community and Enterprise Edition 7.12 through 12.2.1. The specified default branch name could be exposed to unauthorized users.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2019-15733

почти 7 лет назад

An issue was discovered in GitLab Community and Enterprise Edition 7.1 ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2019-15732

почти 7 лет назад

An issue was discovered in GitLab Community and Enterprise Edition 12.2 through 12.2.1. The project import API could be used to bypass project visibility restrictions.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2019-15732

почти 7 лет назад

An issue was discovered in GitLab Community and Enterprise Edition 12. ...

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2019-15731

почти 7 лет назад

An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Non-members were able to comment on merge requests despite the repository being set to allow only project members to do so.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2019-15731

почти 7 лет назад

An issue was discovered in GitLab Community and Enterprise Edition 12. ...

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2019-15730

почти 7 лет назад

An issue was discovered in GitLab Community and Enterprise Edition 8.14 through 12.2.1. The Jira integration contains a SSRF vulnerability as a result of a bypass of the current protection mechanisms against this type of attack, which would allow sending requests to any resources accessible in the local network by the GitLab server.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2019-15730

почти 7 лет назад

An issue was discovered in GitLab Community and Enterprise Edition 8.1 ...

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
ubuntu логотип
CVE-2019-15736

An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Under certain circumstances, CI pipelines could potentially be used in a denial of service attack.

CVSS3: 7.5
2%
Низкий
почти 7 лет назад
ubuntu логотип
CVE-2019-15737

An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Certain account actions needed improved authentication and session management.

CVSS3: 6.5
1%
Низкий
почти 7 лет назад
nvd логотип
CVE-2019-15733

An issue was discovered in GitLab Community and Enterprise Edition 7.12 through 12.2.1. The specified default branch name could be exposed to unauthorized users.

CVSS3: 4.3
1%
Низкий
почти 7 лет назад
debian логотип
CVE-2019-15733

An issue was discovered in GitLab Community and Enterprise Edition 7.1 ...

CVSS3: 4.3
1%
Низкий
почти 7 лет назад
nvd логотип
CVE-2019-15732

An issue was discovered in GitLab Community and Enterprise Edition 12.2 through 12.2.1. The project import API could be used to bypass project visibility restrictions.

CVSS3: 5.3
2%
Низкий
почти 7 лет назад
debian логотип
CVE-2019-15732

An issue was discovered in GitLab Community and Enterprise Edition 12. ...

CVSS3: 5.3
2%
Низкий
почти 7 лет назад
nvd логотип
CVE-2019-15731

An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Non-members were able to comment on merge requests despite the repository being set to allow only project members to do so.

CVSS3: 5.3
1%
Низкий
почти 7 лет назад
debian логотип
CVE-2019-15731

An issue was discovered in GitLab Community and Enterprise Edition 12. ...

CVSS3: 5.3
1%
Низкий
почти 7 лет назад
nvd логотип
CVE-2019-15730

An issue was discovered in GitLab Community and Enterprise Edition 8.14 through 12.2.1. The Jira integration contains a SSRF vulnerability as a result of a bypass of the current protection mechanisms against this type of attack, which would allow sending requests to any resources accessible in the local network by the GitLab server.

CVSS3: 7.5
1%
Низкий
почти 7 лет назад
debian логотип
CVE-2019-15730

An issue was discovered in GitLab Community and Enterprise Edition 8.1 ...

CVSS3: 7.5
1%
Низкий
почти 7 лет назад

Уязвимостей на страницу


Поделиться