Gitlab — веб-платформа для управления проектами и репозиториями программного кода, работа которой основана на популярной системе контроля версий Git.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 17.0.8 | 17.0.8 | ||
| 17.0.7 | 17.0.7 | ||
| 17.0.6 | 17.0.6 | ||
| 17.0.5 | 17.0.5 | ||
| 17.0.4 | 17.0.4 | ||
| 17.0.3 | 17.0.3 | ||
| 17.0.2 | 17.0.2 | ||
| 17.0.1 | 17.0.1 | ||
| 17.0.0 | 17.0.0 |
Показывать по
Количество 6 169
CVE-2017-0926
Gitlab Community Edition version 10.3 is vulnerable to an improper aut ...
CVE-2017-0924
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input ...
CVE-2017-0915
Gitlab Community Edition version 10.2.4 is vulnerable to a lack of inp ...
CVE-2017-0918
Gitlab Community Edition version 10.3 is vulnerable to a path traversa ...
CVE-2017-0917
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in persistent cross site scripting.
CVE-2017-0914
Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a GitLab instance's database.
CVE-2017-0922
Gitlab Enterprise Edition version 10.3 is vulnerable to an authorization bypass issue in the GitLab Projects::BoardsController component resulting in an information disclosure on any board object.
CVE-2017-0918
Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution.
CVE-2017-0927
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users.
CVE-2017-0924
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scripting.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
CVE-2017-0926 Gitlab Community Edition version 10.3 is vulnerable to an improper aut ... | CVSS3: 8.8 | 1% Низкий | больше 8 лет назад | |
CVE-2017-0924 Gitlab Community Edition version 10.2.4 is vulnerable to lack of input ... | CVSS3: 6.1 | 1% Низкий | больше 8 лет назад | |
CVE-2017-0915 Gitlab Community Edition version 10.2.4 is vulnerable to a lack of inp ... | CVSS3: 9.8 | 6% Низкий | больше 8 лет назад | |
CVE-2017-0918 Gitlab Community Edition version 10.3 is vulnerable to a path traversa ... | CVSS3: 8.8 | 4% Низкий | больше 8 лет назад | |
CVE-2017-0917 Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in persistent cross site scripting. | CVSS3: 6.1 | 1% Низкий | больше 8 лет назад | |
CVE-2017-0914 Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a GitLab instance's database. | CVSS3: 7.5 | 1% Низкий | больше 8 лет назад | |
CVE-2017-0922 Gitlab Enterprise Edition version 10.3 is vulnerable to an authorization bypass issue in the GitLab Projects::BoardsController component resulting in an information disclosure on any board object. | CVSS3: 7.5 | 1% Низкий | больше 8 лет назад | |
CVE-2017-0918 Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution. | CVSS3: 8.8 | 4% Низкий | больше 8 лет назад | |
CVE-2017-0927 Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users. | CVSS3: 6.5 | 1% Низкий | больше 8 лет назад | |
CVE-2017-0924 Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scripting. | CVSS3: 6.1 | 1% Низкий | больше 8 лет назад |
Уязвимостей на страницу