Логотип exploitDog
product: "gitlab"
Консоль
Логотип exploitDog

exploitDog

product: "gitlab"

Количество 4 569

Количество 4 569

ubuntu логотип

CVE-2019-20142

больше 5 лет назад

An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 12.3 through 12.6.1. It allows Denial of Service.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2019-20142

больше 5 лет назад

An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 12.3 through 12.6.1. It allows Denial of Service.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2019-20142

больше 5 лет назад

An issue was discovered in GitLab Community Edition (CE) and Enterpris ...

CVSS3: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2019-19629

больше 5 лет назад

In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private code would be disclosed via the Group Search API provided by the Elasticsearch integration.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2019-19629

больше 5 лет назад

In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private code would be disclosed via the Group Search API provided by the Elasticsearch integration.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2019-19629

больше 5 лет назад

In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferrin ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2019-19628

больше 5 лет назад

In GitLab EE 11.3 through 12.5.3, 12.4.5, and 12.3.8, insufficient parameter sanitization for the Maven package registry could lead to privilege escalation and remote code execution vulnerabilities under certain conditions.

CVSS3: 9.8
EPSS: Низкий
nvd логотип

CVE-2019-19628

больше 5 лет назад

In GitLab EE 11.3 through 12.5.3, 12.4.5, and 12.3.8, insufficient parameter sanitization for the Maven package registry could lead to privilege escalation and remote code execution vulnerabilities under certain conditions.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2019-19628

больше 5 лет назад

In GitLab EE 11.3 through 12.5.3, 12.4.5, and 12.3.8, insufficient par ...

CVSS3: 9.8
EPSS: Низкий
ubuntu логотип

CVE-2019-19314

больше 5 лет назад

GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2019-19314

больше 5 лет назад

GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2019-19314

больше 5 лет назад

GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens i ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2019-19313

больше 5 лет назад

GitLab EE 12.3 through 12.5, 12.4.3, and 12.3.6 allows Denial of Service. Certain characters were making it impossible to create, edit, or view issues and commits.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2019-19313

больше 5 лет назад

GitLab EE 12.3 through 12.5, 12.4.3, and 12.3.6 allows Denial of Service. Certain characters were making it impossible to create, edit, or view issues and commits.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2019-19313

больше 5 лет назад

GitLab EE 12.3 through 12.5, 12.4.3, and 12.3.6 allows Denial of Servi ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2019-19312

больше 5 лет назад

GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 has Incorrect Access Control. After a project changed to private, previously forked repositories were still able to get information about the private project through the API.

CVSS3: 5.8
EPSS: Низкий
nvd логотип

CVE-2019-19312

больше 5 лет назад

GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 has Incorrect Access Control. After a project changed to private, previously forked repositories were still able to get information about the private project through the API.

CVSS3: 5.8
EPSS: Низкий
debian логотип

CVE-2019-19312

больше 5 лет назад

GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 has Incorrect Access C ...

CVSS3: 5.8
EPSS: Низкий
ubuntu логотип

CVE-2019-19311

больше 5 лет назад

GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 allows XSS in group and profile fields.

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2019-19311

больше 5 лет назад

GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 allows XSS in group and profile fields.

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2019-20142

An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 12.3 through 12.6.1. It allows Denial of Service.

CVSS3: 4.3
0%
Низкий
больше 5 лет назад
nvd логотип
CVE-2019-20142

An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 12.3 through 12.6.1. It allows Denial of Service.

CVSS3: 4.3
0%
Низкий
больше 5 лет назад
debian логотип
CVE-2019-20142

An issue was discovered in GitLab Community Edition (CE) and Enterpris ...

CVSS3: 4.3
0%
Низкий
больше 5 лет назад
ubuntu логотип
CVE-2019-19629

In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private code would be disclosed via the Group Search API provided by the Elasticsearch integration.

CVSS3: 7.5
0%
Низкий
больше 5 лет назад
nvd логотип
CVE-2019-19629

In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private code would be disclosed via the Group Search API provided by the Elasticsearch integration.

CVSS3: 7.5
0%
Низкий
больше 5 лет назад
debian логотип
CVE-2019-19629

In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferrin ...

CVSS3: 7.5
0%
Низкий
больше 5 лет назад
ubuntu логотип
CVE-2019-19628

In GitLab EE 11.3 through 12.5.3, 12.4.5, and 12.3.8, insufficient parameter sanitization for the Maven package registry could lead to privilege escalation and remote code execution vulnerabilities under certain conditions.

CVSS3: 9.8
2%
Низкий
больше 5 лет назад
nvd логотип
CVE-2019-19628

In GitLab EE 11.3 through 12.5.3, 12.4.5, and 12.3.8, insufficient parameter sanitization for the Maven package registry could lead to privilege escalation and remote code execution vulnerabilities under certain conditions.

CVSS3: 9.8
2%
Низкий
больше 5 лет назад
debian логотип
CVE-2019-19628

In GitLab EE 11.3 through 12.5.3, 12.4.5, and 12.3.8, insufficient par ...

CVSS3: 9.8
2%
Низкий
больше 5 лет назад
ubuntu логотип
CVE-2019-19314

GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext.

CVSS3: 7.5
0%
Низкий
больше 5 лет назад
nvd логотип
CVE-2019-19314

GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext.

CVSS3: 7.5
0%
Низкий
больше 5 лет назад
debian логотип
CVE-2019-19314

GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens i ...

CVSS3: 7.5
0%
Низкий
больше 5 лет назад
ubuntu логотип
CVE-2019-19313

GitLab EE 12.3 through 12.5, 12.4.3, and 12.3.6 allows Denial of Service. Certain characters were making it impossible to create, edit, or view issues and commits.

CVSS3: 7.5
0%
Низкий
больше 5 лет назад
nvd логотип
CVE-2019-19313

GitLab EE 12.3 through 12.5, 12.4.3, and 12.3.6 allows Denial of Service. Certain characters were making it impossible to create, edit, or view issues and commits.

CVSS3: 7.5
0%
Низкий
больше 5 лет назад
debian логотип
CVE-2019-19313

GitLab EE 12.3 through 12.5, 12.4.3, and 12.3.6 allows Denial of Servi ...

CVSS3: 7.5
0%
Низкий
больше 5 лет назад
ubuntu логотип
CVE-2019-19312

GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 has Incorrect Access Control. After a project changed to private, previously forked repositories were still able to get information about the private project through the API.

CVSS3: 5.8
0%
Низкий
больше 5 лет назад
nvd логотип
CVE-2019-19312

GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 has Incorrect Access Control. After a project changed to private, previously forked repositories were still able to get information about the private project through the API.

CVSS3: 5.8
0%
Низкий
больше 5 лет назад
debian логотип
CVE-2019-19312

GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 has Incorrect Access C ...

CVSS3: 5.8
0%
Низкий
больше 5 лет назад
ubuntu логотип
CVE-2019-19311

GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 allows XSS in group and profile fields.

CVSS3: 5.4
0%
Низкий
больше 5 лет назад
nvd логотип
CVE-2019-19311

GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 allows XSS in group and profile fields.

CVSS3: 5.4
0%
Низкий
больше 5 лет назад

Уязвимостей на страницу