Логотип exploitDog
product: "gitlab"
Консоль
Логотип exploitDog

exploitDog

product: "gitlab"

Количество 4 564

Количество 4 564

debian логотип

CVE-2018-19581

почти 6 лет назад

GitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2018-19580

почти 6 лет назад

All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not send an email to the old email address when an email address change is made.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2018-19580

почти 6 лет назад

All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not send an email to the old email address when an email address change is made.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2018-19580

почти 6 лет назад

All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not sen ...

CVSS3: 5.3
EPSS: Низкий
ubuntu логотип

CVE-2018-19579

почти 6 лет назад

GitLab EE version 11.5 is vulnerable to a persistent XSS vulnerability in the Operations page. This is fixed in 11.5.1.

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2018-19579

почти 6 лет назад

GitLab EE version 11.5 is vulnerable to a persistent XSS vulnerability in the Operations page. This is fixed in 11.5.1.

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2018-19579

почти 6 лет назад

GitLab EE version 11.5 is vulnerable to a persistent XSS vulnerability ...

CVSS3: 5.4
EPSS: Низкий
ubuntu логотип

CVE-2018-19578

почти 6 лет назад

GitLab EE, version 11.5 before 11.5.1, is vulnerable to an insecure object reference issue that permits a user with Reporter privileges to view the Jaeger Tracing Operations page.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2018-19578

почти 6 лет назад

GitLab EE, version 11.5 before 11.5.1, is vulnerable to an insecure object reference issue that permits a user with Reporter privileges to view the Jaeger Tracing Operations page.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2018-19578

почти 6 лет назад

GitLab EE, version 11.5 before 11.5.1, is vulnerable to an insecure ob ...

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2018-19577

почти 6 лет назад

Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an incorrect access control vulnerability that displays to an unauthorized user the title and namespace of a confidential issue.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2018-19577

почти 6 лет назад

Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an incorrect access control vulnerability that displays to an unauthorized user the title and namespace of a confidential issue.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2018-19577

почти 6 лет назад

Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4 ...

CVSS3: 5.3
EPSS: Низкий
ubuntu логотип

CVE-2018-19576

почти 6 лет назад

GitLab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an access control issue that allows a Guest user to make changes to or delete their own comments on an issue, after the issue was made Confidential.

CVSS3: 8.1
EPSS: Низкий
nvd логотип

CVE-2018-19576

почти 6 лет назад

GitLab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an access control issue that allows a Guest user to make changes to or delete their own comments on an issue, after the issue was made Confidential.

CVSS3: 8.1
EPSS: Низкий
debian логотип

CVE-2018-19576

почти 6 лет назад

GitLab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4 ...

CVSS3: 8.1
EPSS: Низкий
ubuntu логотип

CVE-2018-19575

почти 6 лет назад

GitLab CE/EE, versions 10.1 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an insecure direct object reference issue that allows a user to make comments on a locked issue.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2018-19575

почти 6 лет назад

GitLab CE/EE, versions 10.1 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an insecure direct object reference issue that allows a user to make comments on a locked issue.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2018-19575

почти 6 лет назад

GitLab CE/EE, versions 10.1 up to 11.x before 11.3.11, 11.4 before 11. ...

CVSS3: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2018-19574

почти 6 лет назад

GitLab CE/EE, versions 7.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in the OAuth authorization page.

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
debian логотип
CVE-2018-19581

GitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, ...

CVSS3: 7.5
0%
Низкий
почти 6 лет назад
ubuntu логотип
CVE-2018-19580

All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not send an email to the old email address when an email address change is made.

CVSS3: 5.3
0%
Низкий
почти 6 лет назад
nvd логотип
CVE-2018-19580

All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not send an email to the old email address when an email address change is made.

CVSS3: 5.3
0%
Низкий
почти 6 лет назад
debian логотип
CVE-2018-19580

All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not sen ...

CVSS3: 5.3
0%
Низкий
почти 6 лет назад
ubuntu логотип
CVE-2018-19579

GitLab EE version 11.5 is vulnerable to a persistent XSS vulnerability in the Operations page. This is fixed in 11.5.1.

CVSS3: 5.4
0%
Низкий
почти 6 лет назад
nvd логотип
CVE-2018-19579

GitLab EE version 11.5 is vulnerable to a persistent XSS vulnerability in the Operations page. This is fixed in 11.5.1.

CVSS3: 5.4
0%
Низкий
почти 6 лет назад
debian логотип
CVE-2018-19579

GitLab EE version 11.5 is vulnerable to a persistent XSS vulnerability ...

CVSS3: 5.4
0%
Низкий
почти 6 лет назад
ubuntu логотип
CVE-2018-19578

GitLab EE, version 11.5 before 11.5.1, is vulnerable to an insecure object reference issue that permits a user with Reporter privileges to view the Jaeger Tracing Operations page.

CVSS3: 6.5
0%
Низкий
почти 6 лет назад
nvd логотип
CVE-2018-19578

GitLab EE, version 11.5 before 11.5.1, is vulnerable to an insecure object reference issue that permits a user with Reporter privileges to view the Jaeger Tracing Operations page.

CVSS3: 6.5
0%
Низкий
почти 6 лет назад
debian логотип
CVE-2018-19578

GitLab EE, version 11.5 before 11.5.1, is vulnerable to an insecure ob ...

CVSS3: 6.5
0%
Низкий
почти 6 лет назад
ubuntu логотип
CVE-2018-19577

Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an incorrect access control vulnerability that displays to an unauthorized user the title and namespace of a confidential issue.

CVSS3: 5.3
0%
Низкий
почти 6 лет назад
nvd логотип
CVE-2018-19577

Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an incorrect access control vulnerability that displays to an unauthorized user the title and namespace of a confidential issue.

CVSS3: 5.3
0%
Низкий
почти 6 лет назад
debian логотип
CVE-2018-19577

Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4 ...

CVSS3: 5.3
0%
Низкий
почти 6 лет назад
ubuntu логотип
CVE-2018-19576

GitLab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an access control issue that allows a Guest user to make changes to or delete their own comments on an issue, after the issue was made Confidential.

CVSS3: 8.1
0%
Низкий
почти 6 лет назад
nvd логотип
CVE-2018-19576

GitLab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an access control issue that allows a Guest user to make changes to or delete their own comments on an issue, after the issue was made Confidential.

CVSS3: 8.1
0%
Низкий
почти 6 лет назад
debian логотип
CVE-2018-19576

GitLab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4 ...

CVSS3: 8.1
0%
Низкий
почти 6 лет назад
ubuntu логотип
CVE-2018-19575

GitLab CE/EE, versions 10.1 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an insecure direct object reference issue that allows a user to make comments on a locked issue.

CVSS3: 4.3
0%
Низкий
почти 6 лет назад
nvd логотип
CVE-2018-19575

GitLab CE/EE, versions 10.1 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an insecure direct object reference issue that allows a user to make comments on a locked issue.

CVSS3: 4.3
0%
Низкий
почти 6 лет назад
debian логотип
CVE-2018-19575

GitLab CE/EE, versions 10.1 up to 11.x before 11.3.11, 11.4 before 11. ...

CVSS3: 4.3
0%
Низкий
почти 6 лет назад
ubuntu логотип
CVE-2018-19574

GitLab CE/EE, versions 7.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in the OAuth authorization page.

CVSS3: 5.4
0%
Низкий
почти 6 лет назад

Уязвимостей на страницу