Количество 5 531
Количество 5 531
CVE-2019-5469
An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading files from project archive to replace other users files potentially allowing an attacker to replace project binaries or other uploaded assets.
CVE-2019-5469
An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11 ...
CVE-2019-5468
An privilege escalation issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 when Mattermost slash commands are used with a blocked account.
CVE-2019-5468
An privilege escalation issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 when Mattermost slash commands are used with a blocked account.
CVE-2019-5468
An privilege escalation issue was discovered in Gitlab versions < 12.1 ...
CVE-2019-5467
An input validation and output encoding issue was discovered in the GitLab CE/EE wiki pages feature which could result in a persistent XSS. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.
CVE-2019-5467
An input validation and output encoding issue was discovered in the GitLab CE/EE wiki pages feature which could result in a persistent XSS. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.
CVE-2019-5467
An input validation and output encoding issue was discovered in the Gi ...
CVE-2019-5466
An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to disclose label names.
CVE-2019-5466
An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to disclose label names.
CVE-2019-5466
An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new ...
CVE-2019-5465
An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosure of the newly created issue ID.
CVE-2019-5465
An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosure of the newly created issue ID.
CVE-2019-5465
An information disclosure issue was discovered in GitLab CE/EE 8.14 an ...
CVE-2019-5464
A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which could result in SSRF where the library is utilized.
CVE-2019-5464
A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which could result in SSRF where the library is utilized.
CVE-2019-5464
A flawed DNS rebinding protection issue was discovered in GitLab CE/EE ...
CVE-2019-5463
An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.
CVE-2019-5463
An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.
CVE-2019-5463
An authorization issue was discovered in the GitLab CE/EE CI badge ima ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-5469 An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading files from project archive to replace other users files potentially allowing an attacker to replace project binaries or other uploaded assets. | CVSS3: 6.5 | 0% Низкий | больше 6 лет назад |
| CVE-2019-5469 An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11 ... | CVSS3: 6.5 | 0% Низкий | больше 6 лет назад |
 | CVE-2019-5468 An privilege escalation issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 when Mattermost slash commands are used with a blocked account. | CVSS3: 8.8 | 1% Низкий | около 6 лет назад |
| CVE-2019-5468 An privilege escalation issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 when Mattermost slash commands are used with a blocked account. | CVSS3: 8.8 | 1% Низкий | около 6 лет назад |
| CVE-2019-5468 An privilege escalation issue was discovered in Gitlab versions < 12.1 ... | CVSS3: 8.8 | 1% Низкий | около 6 лет назад |
| CVE-2019-5467 An input validation and output encoding issue was discovered in the GitLab CE/EE wiki pages feature which could result in a persistent XSS. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6. | CVSS3: 5.4 | 0% Низкий | больше 6 лет назад |
| CVE-2019-5467 An input validation and output encoding issue was discovered in the GitLab CE/EE wiki pages feature which could result in a persistent XSS. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6. | CVSS3: 5.4 | 0% Низкий | больше 6 лет назад |
| CVE-2019-5467 An input validation and output encoding issue was discovered in the Gi ... | CVSS3: 5.4 | 0% Низкий | больше 6 лет назад |
| CVE-2019-5466 An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to disclose label names. | CVSS3: 4.3 | 0% Низкий | около 6 лет назад |
| CVE-2019-5466 An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to disclose label names. | CVSS3: 4.3 | 0% Низкий | около 6 лет назад |
| CVE-2019-5466 An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new ... | CVSS3: 4.3 | 0% Низкий | около 6 лет назад |
| CVE-2019-5465 An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosure of the newly created issue ID. | CVSS3: 4.3 | 0% Низкий | около 6 лет назад |
| CVE-2019-5465 An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosure of the newly created issue ID. | CVSS3: 4.3 | 0% Низкий | около 6 лет назад |
| CVE-2019-5465 An information disclosure issue was discovered in GitLab CE/EE 8.14 an ... | CVSS3: 4.3 | 0% Низкий | около 6 лет назад |
| CVE-2019-5464 A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which could result in SSRF where the library is utilized. | CVSS3: 9.8 | 0% Низкий | около 6 лет назад |
| CVE-2019-5464 A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which could result in SSRF where the library is utilized. | CVSS3: 9.8 | 0% Низкий | около 6 лет назад |
| CVE-2019-5464 A flawed DNS rebinding protection issue was discovered in GitLab CE/EE ... | CVSS3: 9.8 | 0% Низкий | около 6 лет назад |
| CVE-2019-5463 An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6. | CVSS3: 5.3 | 0% Низкий | больше 6 лет назад |
| CVE-2019-5463 An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6. | CVSS3: 5.3 | 0% Низкий | больше 6 лет назад |
| CVE-2019-5463 An authorization issue was discovered in the GitLab CE/EE CI badge ima ... | CVSS3: 5.3 | 0% Низкий | больше 6 лет назад |
Уязвимостей на страницу