Логотип exploitDog
product: "gitlab"
Консоль
Логотип exploitDog

exploitDog

product: "gitlab"

Количество 5 336

Количество 5 336

nvd логотип

CVE-2020-13311

больше 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Wiki was vulnerable to a parser attack that prohibits anyone from accessing the Wiki functionality through the user interface.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2020-13311

больше 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2 ...

CVSS3: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2020-13310

больше 5 лет назад

A vulnerability was discovered in GitLab runner versions before 13.1.3, 13.2.3 and 13.3.1. It was possible to make the gitlab-runner process crash by sending malformed queries, resulting in a denial of service.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2020-13310

больше 5 лет назад

A vulnerability was discovered in GitLab runner versions before 13.1.3, 13.2.3 and 13.3.1. It was possible to make the gitlab-runner process crash by sending malformed queries, resulting in a denial of service.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2020-13310

больше 5 лет назад

A vulnerability was discovered in GitLab runner versions before 13.1.3 ...

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2020-13309

больше 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was vulnerable to a blind SSRF attack through the repository mirroring feature.

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2020-13309

больше 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was vulnerable to a blind SSRF attack through the repository mirroring feature.

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2020-13309

больше 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2 ...

CVSS3: 5.4
EPSS: Низкий
ubuntu логотип

CVE-2020-13308

больше 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. A user without 2 factor authentication enabled could be prohibited from accessing GitLab by being invited into a project that had 2 factor authentication inheritance.

CVSS3: 2.7
EPSS: Низкий
nvd логотип

CVE-2020-13308

больше 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. A user without 2 factor authentication enabled could be prohibited from accessing GitLab by being invited into a project that had 2 factor authentication inheritance.

CVSS3: 2.7
EPSS: Низкий
debian логотип

CVE-2020-13308

больше 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2 ...

CVSS3: 2.7
EPSS: Низкий
ubuntu логотип

CVE-2020-13307

больше 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not revoking current user sessions when 2 factor authentication was activated allowing a malicious user to maintain their access.

CVSS3: 3.8
EPSS: Низкий
nvd логотип

CVE-2020-13307

больше 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not revoking current user sessions when 2 factor authentication was activated allowing a malicious user to maintain their access.

CVSS3: 3.8
EPSS: Низкий
debian логотип

CVE-2020-13307

больше 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2 ...

CVSS3: 3.8
EPSS: Низкий
ubuntu логотип

CVE-2020-13306

больше 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Webhook feature could be abused to perform denial of service attacks due to the lack of rate limitation.

CVSS3: 3.7
EPSS: Низкий
nvd логотип

CVE-2020-13306

больше 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Webhook feature could be abused to perform denial of service attacks due to the lack of rate limitation.

CVSS3: 3.7
EPSS: Низкий
debian логотип

CVE-2020-13306

больше 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2 ...

CVSS3: 3.7
EPSS: Низкий
ubuntu логотип

CVE-2020-13305

больше 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not invalidating project invitation link upon removing a user from a project.

CVSS3: 3.5
EPSS: Низкий
nvd логотип

CVE-2020-13305

больше 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not invalidating project invitation link upon removing a user from a project.

CVSS3: 3.5
EPSS: Низкий
debian логотип

CVE-2020-13305

больше 5 лет назад

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2 ...

CVSS3: 3.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2020-13311

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Wiki was vulnerable to a parser attack that prohibits anyone from accessing the Wiki functionality through the user interface.

CVSS3: 4.3
0%
Низкий
больше 5 лет назад
debian логотип
CVE-2020-13311

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2 ...

CVSS3: 4.3
0%
Низкий
больше 5 лет назад
ubuntu логотип
CVE-2020-13310

A vulnerability was discovered in GitLab runner versions before 13.1.3, 13.2.3 and 13.3.1. It was possible to make the gitlab-runner process crash by sending malformed queries, resulting in a denial of service.

CVSS3: 6.5
0%
Низкий
больше 5 лет назад
nvd логотип
CVE-2020-13310

A vulnerability was discovered in GitLab runner versions before 13.1.3, 13.2.3 and 13.3.1. It was possible to make the gitlab-runner process crash by sending malformed queries, resulting in a denial of service.

CVSS3: 6.5
0%
Низкий
больше 5 лет назад
debian логотип
CVE-2020-13310

A vulnerability was discovered in GitLab runner versions before 13.1.3 ...

CVSS3: 6.5
0%
Низкий
больше 5 лет назад
ubuntu логотип
CVE-2020-13309

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was vulnerable to a blind SSRF attack through the repository mirroring feature.

CVSS3: 5.4
0%
Низкий
больше 5 лет назад
nvd логотип
CVE-2020-13309

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was vulnerable to a blind SSRF attack through the repository mirroring feature.

CVSS3: 5.4
0%
Низкий
больше 5 лет назад
debian логотип
CVE-2020-13309

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2 ...

CVSS3: 5.4
0%
Низкий
больше 5 лет назад
ubuntu логотип
CVE-2020-13308

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. A user without 2 factor authentication enabled could be prohibited from accessing GitLab by being invited into a project that had 2 factor authentication inheritance.

CVSS3: 2.7
0%
Низкий
больше 5 лет назад
nvd логотип
CVE-2020-13308

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. A user without 2 factor authentication enabled could be prohibited from accessing GitLab by being invited into a project that had 2 factor authentication inheritance.

CVSS3: 2.7
0%
Низкий
больше 5 лет назад
debian логотип
CVE-2020-13308

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2 ...

CVSS3: 2.7
0%
Низкий
больше 5 лет назад
ubuntu логотип
CVE-2020-13307

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not revoking current user sessions when 2 factor authentication was activated allowing a malicious user to maintain their access.

CVSS3: 3.8
0%
Низкий
больше 5 лет назад
nvd логотип
CVE-2020-13307

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not revoking current user sessions when 2 factor authentication was activated allowing a malicious user to maintain their access.

CVSS3: 3.8
0%
Низкий
больше 5 лет назад
debian логотип
CVE-2020-13307

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2 ...

CVSS3: 3.8
0%
Низкий
больше 5 лет назад
ubuntu логотип
CVE-2020-13306

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Webhook feature could be abused to perform denial of service attacks due to the lack of rate limitation.

CVSS3: 3.7
0%
Низкий
больше 5 лет назад
nvd логотип
CVE-2020-13306

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Webhook feature could be abused to perform denial of service attacks due to the lack of rate limitation.

CVSS3: 3.7
0%
Низкий
больше 5 лет назад
debian логотип
CVE-2020-13306

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2 ...

CVSS3: 3.7
0%
Низкий
больше 5 лет назад
ubuntu логотип
CVE-2020-13305

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not invalidating project invitation link upon removing a user from a project.

CVSS3: 3.5
0%
Низкий
больше 5 лет назад
nvd логотип
CVE-2020-13305

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not invalidating project invitation link upon removing a user from a project.

CVSS3: 3.5
0%
Низкий
больше 5 лет назад
debian логотип
CVE-2020-13305

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2 ...

CVSS3: 3.5
0%
Низкий
больше 5 лет назад

Уязвимостей на страницу