Логотип exploitDog
product: "gitlab"
Консоль
Логотип exploitDog

exploitDog

product: "gitlab"

Количество 5 336

Количество 5 336

debian логотип

CVE-2021-22209

почти 5 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2021-22208

почти 5 лет назад

An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7. Improper permission check could allow the change of timestamp for issue creation or update.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2021-22208

почти 5 лет назад

An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7. Improper permission check could allow the change of timestamp for issue creation or update.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2021-22208

почти 5 лет назад

An issue has been discovered in GitLab affecting versions starting wit ...

CVSS3: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2021-22206

почти 5 лет назад

An issue has been discovered in GitLab affecting all versions starting from 11.6. Pull mirror credentials are exposed that allows other maintainers to be able to view the credentials in plain-text,

CVSS3: 6.8
EPSS: Низкий
nvd логотип

CVE-2021-22206

почти 5 лет назад

An issue has been discovered in GitLab affecting all versions starting from 11.6. Pull mirror credentials are exposed that allows other maintainers to be able to view the credentials in plain-text,

CVSS3: 6.8
EPSS: Низкий
debian логотип

CVE-2021-22206

почти 5 лет назад

An issue has been discovered in GitLab affecting all versions starting ...

CVSS3: 6.8
EPSS: Низкий
ubuntu логотип

CVE-2021-22205

почти 5 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.

CVSS3: 10
EPSS: Критический
nvd логотип

CVE-2021-22205

почти 5 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.

CVSS3: 10
EPSS: Критический
debian логотип

CVE-2021-22205

почти 5 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

CVSS3: 10
EPSS: Критический
ubuntu логотип

CVE-2021-22203

почти 5 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.9 before 13.8.7, all versions starting from 13.9 before 13.9.5, and all versions starting from 13.10 before 13.10.1. A specially crafted Wiki page allowed attackers to read arbitrary files on the server.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2021-22203

почти 5 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.9 before 13.8.7, all versions starting from 13.9 before 13.9.5, and all versions starting from 13.10 before 13.10.1. A specially crafted Wiki page allowed attackers to read arbitrary files on the server.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2021-22203

почти 5 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2021-22202

почти 5 лет назад

An issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an admin, it was possible to issue a CSRF in System hooks through the API.

CVSS3: 2.4
EPSS: Низкий
nvd логотип

CVE-2021-22202

почти 5 лет назад

An issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an admin, it was possible to issue a CSRF in System hooks through the API.

CVSS3: 2.4
EPSS: Низкий
debian логотип

CVE-2021-22202

почти 5 лет назад

An issue has been discovered in GitLab CE/EE affecting all previous ve ...

CVSS3: 2.4
EPSS: Низкий
ubuntu логотип

CVE-2021-22201

почти 5 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file could read files on the server.

CVSS3: 9.6
EPSS: Низкий
nvd логотип

CVE-2021-22201

почти 5 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file could read files on the server.

CVSS3: 9.6
EPSS: Низкий
debian логотип

CVE-2021-22201

почти 5 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

CVSS3: 9.6
EPSS: Низкий
ubuntu логотип

CVE-2021-22200

почти 5 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. Under a special condition it was possible to access data of an internal repository through a public project fork as an anonymous user.

CVSS3: 5.9
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
debian логотип
CVE-2021-22209

An issue has been discovered in GitLab CE/EE affecting all versions st ...

CVSS3: 7.5
0%
Низкий
почти 5 лет назад
ubuntu логотип
CVE-2021-22208

An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7. Improper permission check could allow the change of timestamp for issue creation or update.

CVSS3: 4.3
0%
Низкий
почти 5 лет назад
nvd логотип
CVE-2021-22208

An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7. Improper permission check could allow the change of timestamp for issue creation or update.

CVSS3: 4.3
0%
Низкий
почти 5 лет назад
debian логотип
CVE-2021-22208

An issue has been discovered in GitLab affecting versions starting wit ...

CVSS3: 4.3
0%
Низкий
почти 5 лет назад
ubuntu логотип
CVE-2021-22206

An issue has been discovered in GitLab affecting all versions starting from 11.6. Pull mirror credentials are exposed that allows other maintainers to be able to view the credentials in plain-text,

CVSS3: 6.8
0%
Низкий
почти 5 лет назад
nvd логотип
CVE-2021-22206

An issue has been discovered in GitLab affecting all versions starting from 11.6. Pull mirror credentials are exposed that allows other maintainers to be able to view the credentials in plain-text,

CVSS3: 6.8
0%
Низкий
почти 5 лет назад
debian логотип
CVE-2021-22206

An issue has been discovered in GitLab affecting all versions starting ...

CVSS3: 6.8
0%
Низкий
почти 5 лет назад
ubuntu логотип
CVE-2021-22205

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.

CVSS3: 10
94%
Критический
почти 5 лет назад
nvd логотип
CVE-2021-22205

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.

CVSS3: 10
94%
Критический
почти 5 лет назад
debian логотип
CVE-2021-22205

An issue has been discovered in GitLab CE/EE affecting all versions st ...

CVSS3: 10
94%
Критический
почти 5 лет назад
ubuntu логотип
CVE-2021-22203

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.9 before 13.8.7, all versions starting from 13.9 before 13.9.5, and all versions starting from 13.10 before 13.10.1. A specially crafted Wiki page allowed attackers to read arbitrary files on the server.

CVSS3: 7.5
0%
Низкий
почти 5 лет назад
nvd логотип
CVE-2021-22203

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.9 before 13.8.7, all versions starting from 13.9 before 13.9.5, and all versions starting from 13.10 before 13.10.1. A specially crafted Wiki page allowed attackers to read arbitrary files on the server.

CVSS3: 7.5
0%
Низкий
почти 5 лет назад
debian логотип
CVE-2021-22203

An issue has been discovered in GitLab CE/EE affecting all versions st ...

CVSS3: 7.5
0%
Низкий
почти 5 лет назад
ubuntu логотип
CVE-2021-22202

An issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an admin, it was possible to issue a CSRF in System hooks through the API.

CVSS3: 2.4
0%
Низкий
почти 5 лет назад
nvd логотип
CVE-2021-22202

An issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an admin, it was possible to issue a CSRF in System hooks through the API.

CVSS3: 2.4
0%
Низкий
почти 5 лет назад
debian логотип
CVE-2021-22202

An issue has been discovered in GitLab CE/EE affecting all previous ve ...

CVSS3: 2.4
0%
Низкий
почти 5 лет назад
ubuntu логотип
CVE-2021-22201

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file could read files on the server.

CVSS3: 9.6
9%
Низкий
почти 5 лет назад
nvd логотип
CVE-2021-22201

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file could read files on the server.

CVSS3: 9.6
9%
Низкий
почти 5 лет назад
debian логотип
CVE-2021-22201

An issue has been discovered in GitLab CE/EE affecting all versions st ...

CVSS3: 9.6
9%
Низкий
почти 5 лет назад
ubuntu логотип
CVE-2021-22200

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. Under a special condition it was possible to access data of an internal repository through a public project fork as an anonymous user.

CVSS3: 5.9
0%
Низкий
почти 5 лет назад

Уязвимостей на страницу