Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 17.0.8 | 17.0.8 | ||
| 17.0.7 | 17.0.7 | ||
| 17.0.6 | 17.0.6 | ||
| 17.0.5 | 17.0.5 | ||
| 17.0.4 | 17.0.4 | ||
| 17.0.3 | 17.0.3 | ||
| 17.0.2 | 17.0.2 | ||
| 17.0.1 | 17.0.1 | ||
| 17.0.0 | 17.0.0 |
Показывать по
Количество 5 920
CVE-2019-15728
An issue was discovered in GitLab Community and Enterprise Edition 10.1 through 12.2.1. Protections against SSRF attacks on the Kubernetes integration are insufficient, which could have allowed an attacker to request any local network resource accessible from the GitLab server.
CVE-2019-15728
An issue was discovered in GitLab Community and Enterprise Edition 10. ...
CVE-2019-15727
An issue was discovered in GitLab Community and Enterprise Edition 11.2 through 12.2.1. Insufficient permission checks were being applied when displaying CI results, potentially exposing some CI metrics data to unauthorized users.
CVE-2019-15727
An issue was discovered in GitLab Community and Enterprise Edition 11. ...
CVE-2019-15726
An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Embedded images and media files in markdown could be pointed to an arbitrary server, which would reveal the IP address of clients requesting the file from that server.
CVE-2019-15726
An issue was discovered in GitLab Community and Enterprise Edition thr ...
CVE-2019-15725
An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. An IDOR in the epic notes API that could result in disclosure of private milestones, labels, and other information.
CVE-2019-15725
An issue was discovered in GitLab Community and Enterprise Edition 12. ...
CVE-2019-15724
An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.2.1. Label descriptions are vulnerable to HTML injection.
CVE-2019-15724
An issue was discovered in GitLab Community and Enterprise Edition 11. ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2019-15728 An issue was discovered in GitLab Community and Enterprise Edition 10.1 through 12.2.1. Protections against SSRF attacks on the Kubernetes integration are insufficient, which could have allowed an attacker to request any local network resource accessible from the GitLab server. | CVSS3: 7.5 | 2% Низкий | почти 7 лет назад |
| CVE-2019-15728 An issue was discovered in GitLab Community and Enterprise Edition 10. ... | CVSS3: 7.5 | 2% Низкий | почти 7 лет назад |
| CVE-2019-15727 An issue was discovered in GitLab Community and Enterprise Edition 11.2 through 12.2.1. Insufficient permission checks were being applied when displaying CI results, potentially exposing some CI metrics data to unauthorized users. | CVSS3: 5.3 | 2% Низкий | почти 7 лет назад |
| CVE-2019-15727 An issue was discovered in GitLab Community and Enterprise Edition 11. ... | CVSS3: 5.3 | 2% Низкий | почти 7 лет назад |
| CVE-2019-15726 An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Embedded images and media files in markdown could be pointed to an arbitrary server, which would reveal the IP address of clients requesting the file from that server. | CVSS3: 5.3 | 2% Низкий | почти 7 лет назад |
| CVE-2019-15726 An issue was discovered in GitLab Community and Enterprise Edition thr ... | CVSS3: 5.3 | 2% Низкий | почти 7 лет назад |
| CVE-2019-15725 An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. An IDOR in the epic notes API that could result in disclosure of private milestones, labels, and other information. | CVSS3: 7.5 | 2% Низкий | почти 7 лет назад |
| CVE-2019-15725 An issue was discovered in GitLab Community and Enterprise Edition 12. ... | CVSS3: 7.5 | 2% Низкий | почти 7 лет назад |
| CVE-2019-15724 An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.2.1. Label descriptions are vulnerable to HTML injection. | CVSS3: 6.1 | 1% Низкий | почти 7 лет назад |
| CVE-2019-15724 An issue was discovered in GitLab Community and Enterprise Edition 11. ... | CVSS3: 6.1 | 1% Низкий | почти 7 лет назад |
Уязвимостей на страницу