Browse CVEs

HIGH 7.5 CVE-2019-18460 An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.4 in the Comments Search feature provided by the Elasticsearch int… GitLab after 12.4.0 Fix from $1,9502019-11-26 MEDIUM 6.5 CVE-2019-15593 GitLab 12.2.3 contains a security vulnerability that allows a user to affect the availability of the service through a Denial of Service attack in Is… GitLab Patch available Fix from $1,6002019-11-22 HIGH 7.5 CVE-2019-15729 An issue was discovered in GitLab Community and Enterprise Edition 8.18 through 12.2.1. An internal endpoint unintentionally disclosed information ab… GitLab 12.0.8 / 12.1.8+ Fix from $1,9502019-09-17 CRITICAL 9.8 CVE-2019-15741 An issue was discovered in GitLab Omnibus 7.4 through 12.2.1. An unsafe interaction with logrotate could result in a privilege escalation Omnibus 12.0.8 / 12.1.8+ Fix from $2,3002019-09-16 HIGH 7.5 CVE-2019-15736 An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Under certain circumstances, CI pipelines could potentially be use… GitLab 12.0.8 / 12.1.8+ Fix from $1,9502019-09-16 MEDIUM 6.5 CVE-2019-15737 An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Certain account actions needed improved authentication and session… GitLab 12.0.8 / 12.1.8+ Fix from $1,6002019-09-16 MEDIUM 6.1 CVE-2019-15739 An issue was discovered in GitLab Community and Enterprise Edition 8.1 through 12.2.1. Certain areas displaying Markdown were not properly sanitizing… GitLab 12.0.8 / 12.1.8+ Fix from $1,6002019-09-16 MEDIUM 5.3 CVE-2019-15738 An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Under certain conditions, merge request IDs were being disclo… GitLab 12.0.8 / 12.1.8+ Fix from $1,6002019-09-16 MEDIUM 5.3 CVE-2019-15740 An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF Geolocation data was not being removed from certain image… GitLab 12.0.8 / 12.1.8+ Fix from $1,6002019-09-16 MEDIUM 5.3 CVE-2019-15731 An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Non-members were able to comment on merge requests despite th… GitLab 12.0.8 / 12.1.8+ Fix from $1,6002019-09-16 MEDIUM 5.3 CVE-2019-15732 An issue was discovered in GitLab Community and Enterprise Edition 12.2 through 12.2.1. The project import API could be used to bypass project visibi… GitLab 12.2.3+ Fix from $1,6002019-09-16 HIGH 7.5 CVE-2019-15722 An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.2.1. Particular mathematical expressions in GitLab Markdown can ex… GitLab 12.0.8 / 12.1.8+ Fix from $1,9502019-09-16 HIGH 7.5 CVE-2019-15725 An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. An IDOR in the epic notes API that could result in disclosure… GitLab 12.0.8 / 12.1.8+ Fix from $1,9502019-09-16 HIGH 7.5 CVE-2019-15728 An issue was discovered in GitLab Community and Enterprise Edition 10.1 through 12.2.1. Protections against SSRF attacks on the Kubernetes integratio… GitLab 12.0.8 / 12.1.8+ Fix from $1,9502019-09-16 HIGH 7.5 CVE-2019-15730 An issue was discovered in GitLab Community and Enterprise Edition 8.14 through 12.2.1. The Jira integration contains a SSRF vulnerability as a resul… GitLab 12.0.8 / 12.1.8+ Fix from $1,9502019-09-16 MEDIUM 6.1 CVE-2019-15724 An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.2.1. Label descriptions are vulnerable to HTML injection. GitLab 12.0.8 / 12.1.8+ Fix from $1,6002019-09-16 MEDIUM 5.4 CVE-2019-15721 An issue was discovered in GitLab Community and Enterprise Edition 10.8 through 12.2.1. An internal endpoint unintentionally allowed group maintainer… GitLab 12.0.8 / 12.1.8+ Fix from $1,6002019-09-16 MEDIUM 5.3 CVE-2019-15723 An issue was discovered in GitLab Community and Enterprise Edition 11.9.x and 11.10.x before 11.10.1. Merge requests created by email could be used t… GitLab 11.10.1+ Fix from $1,6002019-09-16 MEDIUM 5.3 CVE-2019-15726 An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Embedded images and media files in markdown could be pointed to an… GitLab 12.0.8 / 12.1.8+ Fix from $1,6002019-09-16 MEDIUM 5.3 CVE-2019-15727 An issue was discovered in GitLab Community and Enterprise Edition 11.2 through 12.2.1. Insufficient permission checks were being applied when displa… GitLab 12.0.8 / 12.1.8+ Fix from $1,6002019-09-16 HIGH 7.1 CVE-2019-16170 An issue was discovered in GitLab Enterprise Edition 11.x and 12.x before 12.0.9, 12.1.x before 12.1.9, and 12.2.x before 12.2.5. It has Incorrect Ac… GitLab 12.0.9 / 12.1.9+ Fix from $1,9502019-09-16 MEDIUM 6.5 CVE-2019-6791 An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Ac… GitLab 11.5.8 / 11.6.6+ Fix from $1,6002019-09-09 CRITICAL 9.8 CVE-2019-6960 An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1.… GitLab 11.5.8 / 11.6.6+ Fix from $2,3002019-09-09 HIGH 7.0 CVE-2019-6793 An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The Jira integration feature is v… GitLab 11.5.8 / 11.6.6+ Fix from $1,9502019-09-09 MEDIUM 6.5 CVE-2019-6995 An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11… GitLab 11.5.8 / 11.6.6+ Fix from $1,6002019-09-09 MEDIUM 5.4 CVE-2019-6795 An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Insufficient… GitLab 11.5.8 / 11.6.6+ Fix from $1,6002019-09-09 MEDIUM 5.3 CVE-2019-6792 An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Path Disc… GitLab 11.5.8 / 11.6.6+ Fix from $1,6002019-09-09 HIGH 8.8 CVE-2019-6783EPSS 6% An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. GitLab Pages contai… GitLab 11.5.8 / 11.6.6+ Fix from $1,9502019-09-09 HIGH 7.5 CVE-2019-6782 An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Informati… GitLab 11.5.8 / 11.6.6+ Fix from $1,9502019-09-09 HIGH 7.5 CVE-2019-6788 An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Informati… GitLab 11.5.8 / 11.6.6+ Fix from $1,9502019-09-09