Filter
AND
GitLab GitLabInsertion of Sensitive Information Into Sent Data in GitLab
8.5
First published (updated )
GitLab GitLabInsufficient permission checks in scheduled pipeline API in GitLab CE/EE 13.0+ allows an attacker to…
6.5
First published (updated )
GitLab GitLabA vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4. GitLab…
7.3
First published (updated )
GitLab GitLabA vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the restri…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GitLab GitLabA vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permis…
7.2
First published (updated )
GitLab GitLabA vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge…
7.7
First published (updated )
GitLab GitLabAn issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Miss…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GitLab GitLabA vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the privat…
6.5
First published (updated )
GitLab GitLabMissing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 all…
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GitLab GitLabAn issue has been discovered in GitLab affecting versions >=10.7 <13.0.14, >=13.1.0 <13.1.8, >=13.2.…
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GitLab GitLabOAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user to…
8.8
First published (updated )
GitLab GitLabA security issue allowed achieving Denial of Service attacks through memory exhaustion by uploading …
7.5
First published (updated )
GitLab GitLabA user with an unverified email address could request an access to domain restricted groups in GitLa…
8.1
First published (updated )
GitLab GitLabUser email verification bypass in GitLab CE/EE 12.5 and later through 13.0.1 allows user to bypass e…
5.3
First published (updated )
GitLab GitLabAn authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 …
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GitLab GitLabUser is allowed to set an email as a notification email even without verifying the new email in all …
7.4
First published (updated )
GitLab GitLabIn all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable Bitb…
4.3
First published (updated )
GitLab GitLabImproper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0…
5.3
First published (updated )
GitLab GitLabImproper access control in GitLab CE/EE version 10.5 and above allowed subgroup members with inherit…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.