Filter
AND
AND
GitLab GitLabThe Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector
10
First published (updated )
GitLab GitLabAuthentication Bypass by Spoofing in GitLab
9.9
First published (updated )
GitLab GitLabMissing Authentication for Critical Function in GitLab
9.6
EPSS
0.07%
First published (updated )
GitLab GitLabImproper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
8.8
EPSS
0.07%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GitLab GitLabPrivilege Context Switching Error in GitLab
8.8
EPSS
0.07%
First published (updated )
GitLab GitLabIncorrect Authorization in GitLab
8.8
EPSS
0.07%
First published (updated )
GitLab GitLabServer-Side Request Forgery (SSRF) in GitLab
8.2
EPSS
0.07%
First published (updated )
GitLab GitLabExternal Control of Critical State Data in GitLab
8.1
EPSS
0.07%
First published (updated )
GitLab GitLabServer-Side Request Forgery (SSRF) in GitLab
7.7
EPSS
0.07%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GitLab GitLabInefficient Regular Expression Complexity in GitLab
7.5
EPSS
0.05%
First published (updated )
GitLab GitLabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
7.3
First published (updated )
GitLab GitLabPrivilege Defined With Unsafe Actions in GitLab
7.2
EPSS
0.07%
First published (updated )
GitLab GitLabIncorrect Provision of Specified Functionality in GitLab
6.5
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GitLab GitLabUncontrolled Resource Consumption in GitLab
6.5
EPSS
0.04%
First published (updated )
GitLab GitLabGeneration of Error Message Containing Sensitive Information in GitLab
6.5
First published (updated )
GitLab GitLabImproper Protection of Alternate Path in GitLab
6.5
EPSS
0.05%
First published (updated )
GitLab GitLabIncorrect Authorization in GitLab
6.5
EPSS
0.05%
First published (updated )
GitLab GitLabImproper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
6.4
EPSS
0.07%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GitLab GitLabURL Redirection to Untrusted Site ('Open Redirect') in GitLab
6.4
First published (updated )
GitLab GitLabURL Redirection to Untrusted Site ('Open Redirect') in GitLab
6.4
First published (updated )
GitLab GitLabInsertion of Sensitive Information into Log File in GitLab
5.5
First published (updated )
GitLab GitLabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GitLab GitLabImproper Encoding or Escaping of Output in GitLab
5.3
First published (updated )
GitLab GitLabInclusion of Sensitive Information in Source Code in GitLab
5.3
EPSS
0.05%
First published (updated )
GitLab GitLabExposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
5.3
First published (updated )
GitLab GitLabExposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.