Vulnerability index

Browse CVEs

1,035 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

GitLab HIGH 7.5
CVE-2019-18460

An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.4 in the Comments Search feature provided by the Elasticsearch int…

Fix: after 12.4.0
Fix from $1,950 2019-11-26
GitLab MEDIUM 6.5
CVE-2019-15593

GitLab 12.2.3 contains a security vulnerability that allows a user to affect the availability of the service through a Denial of Service attack in Is…

Patch available
Fix from $1,600 2019-11-22
GitLab HIGH 7.5
CVE-2019-15729

An issue was discovered in GitLab Community and Enterprise Edition 8.18 through 12.2.1. An internal endpoint unintentionally disclosed information ab…

Fix: 12.0.8 / 12.1.8+
Fix from $1,950 2019-09-17
Omnibus CRITICAL 9.8
CVE-2019-15741

An issue was discovered in GitLab Omnibus 7.4 through 12.2.1. An unsafe interaction with logrotate could result in a privilege escalation

Fix: 12.0.8 / 12.1.8+
Fix from $2,300 2019-09-16
GitLab HIGH 7.5
CVE-2019-15736

An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Under certain circumstances, CI pipelines could potentially be use…

Fix: 12.0.8 / 12.1.8+
Fix from $1,950 2019-09-16
GitLab MEDIUM 6.5
CVE-2019-15737

An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Certain account actions needed improved authentication and session…

Fix: 12.0.8 / 12.1.8+
Fix from $1,600 2019-09-16
GitLab MEDIUM 6.1
CVE-2019-15739

An issue was discovered in GitLab Community and Enterprise Edition 8.1 through 12.2.1. Certain areas displaying Markdown were not properly sanitizing…

Fix: 12.0.8 / 12.1.8+
Fix from $1,600 2019-09-16
GitLab MEDIUM 5.3
CVE-2019-15738

An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Under certain conditions, merge request IDs were being disclo…

Fix: 12.0.8 / 12.1.8+
Fix from $1,600 2019-09-16
GitLab MEDIUM 5.3
CVE-2019-15740

An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF Geolocation data was not being removed from certain image…

Fix: 12.0.8 / 12.1.8+
Fix from $1,600 2019-09-16
GitLab MEDIUM 5.3
CVE-2019-15731

An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Non-members were able to comment on merge requests despite th…

Fix: 12.0.8 / 12.1.8+
Fix from $1,600 2019-09-16
GitLab MEDIUM 5.3
CVE-2019-15732

An issue was discovered in GitLab Community and Enterprise Edition 12.2 through 12.2.1. The project import API could be used to bypass project visibi…

Fix: 12.2.3+
Fix from $1,600 2019-09-16
GitLab HIGH 7.5
CVE-2019-15722

An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.2.1. Particular mathematical expressions in GitLab Markdown can ex…

Fix: 12.0.8 / 12.1.8+
Fix from $1,950 2019-09-16
GitLab HIGH 7.5
CVE-2019-15725

An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. An IDOR in the epic notes API that could result in disclosure…

Fix: 12.0.8 / 12.1.8+
Fix from $1,950 2019-09-16
GitLab HIGH 7.5
CVE-2019-15728

An issue was discovered in GitLab Community and Enterprise Edition 10.1 through 12.2.1. Protections against SSRF attacks on the Kubernetes integratio…

Fix: 12.0.8 / 12.1.8+
Fix from $1,950 2019-09-16
GitLab HIGH 7.5
CVE-2019-15730

An issue was discovered in GitLab Community and Enterprise Edition 8.14 through 12.2.1. The Jira integration contains a SSRF vulnerability as a resul…

Fix: 12.0.8 / 12.1.8+
Fix from $1,950 2019-09-16
GitLab MEDIUM 6.1
CVE-2019-15724

An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.2.1. Label descriptions are vulnerable to HTML injection.

Fix: 12.0.8 / 12.1.8+
Fix from $1,600 2019-09-16
GitLab MEDIUM 5.4
CVE-2019-15721

An issue was discovered in GitLab Community and Enterprise Edition 10.8 through 12.2.1. An internal endpoint unintentionally allowed group maintainer…

Fix: 12.0.8 / 12.1.8+
Fix from $1,600 2019-09-16
GitLab MEDIUM 5.3
CVE-2019-15723

An issue was discovered in GitLab Community and Enterprise Edition 11.9.x and 11.10.x before 11.10.1. Merge requests created by email could be used t…

Fix: 11.10.1+
Fix from $1,600 2019-09-16
GitLab MEDIUM 5.3
CVE-2019-15726

An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Embedded images and media files in markdown could be pointed to an…

Fix: 12.0.8 / 12.1.8+
Fix from $1,600 2019-09-16
GitLab MEDIUM 5.3
CVE-2019-15727

An issue was discovered in GitLab Community and Enterprise Edition 11.2 through 12.2.1. Insufficient permission checks were being applied when displa…

Fix: 12.0.8 / 12.1.8+
Fix from $1,600 2019-09-16
GitLab HIGH 7.1
CVE-2019-16170

An issue was discovered in GitLab Enterprise Edition 11.x and 12.x before 12.0.9, 12.1.x before 12.1.9, and 12.2.x before 12.2.5. It has Incorrect Ac…

Fix: 12.0.9 / 12.1.9+
Fix from $1,950 2019-09-16
GitLab MEDIUM 6.5
CVE-2019-6791

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Ac…

Fix: 11.5.8 / 11.6.6+
Fix from $1,600 2019-09-09
GitLab CRITICAL 9.8
CVE-2019-6960

An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1.…

Fix: 11.5.8 / 11.6.6+
Fix from $2,300 2019-09-09
GitLab HIGH 7.0
CVE-2019-6793

An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The Jira integration feature is v…

Fix: 11.5.8 / 11.6.6+
Fix from $1,950 2019-09-09
GitLab MEDIUM 6.5
CVE-2019-6995

An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11…

Fix: 11.5.8 / 11.6.6+
Fix from $1,600 2019-09-09
GitLab MEDIUM 5.4
CVE-2019-6795

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Insufficient…

Fix: 11.5.8 / 11.6.6+
Fix from $1,600 2019-09-09
GitLab MEDIUM 5.3
CVE-2019-6792

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Path Disc…

Fix: 11.5.8 / 11.6.6+
Fix from $1,600 2019-09-09
GitLab HIGH 8.8
CVE-2019-6783EPSS 6%

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. GitLab Pages contai…

Fix: 11.5.8 / 11.6.6+
Fix from $1,950 2019-09-09
GitLab HIGH 7.5
CVE-2019-6782

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Informati…

Fix: 11.5.8 / 11.6.6+
Fix from $1,950 2019-09-09
GitLab HIGH 7.5
CVE-2019-6788

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Informati…

Fix: 11.5.8 / 11.6.6+
Fix from $1,950 2019-09-09