Browse CVEs

MEDIUM 6.5 CVE-2019-6785 An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Denial of… GitLab 11.5.8 / 11.6.6+ Fix from $1,6002019-09-09 MEDIUM 6.5 CVE-2019-6786 An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Ac… GitLab 11.5.8 / 11.6.6+ Fix from $1,6002019-09-09 MEDIUM 6.1 CVE-2019-6784 An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows XSS (issu… GitLab 11.5.8 / 11.6.6+ Fix from $1,6002019-09-09 HIGH 7.5 CVE-2019-11605 An issue was discovered in GitLab Community and Enterprise Edition 11.8.x before 11.8.10, 11.9.x before 11.9.11, and 11.10.x before 11.10.3. It allow… GitLab 11.8.10 / 11.9.11+ Fix from $1,9502019-09-09 MEDIUM 6.5 CVE-2019-11549 An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10… GitLab 11.8.9 / 11.9.10+ Fix from $1,6002019-09-09 MEDIUM 6.1 CVE-2019-11547 An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It has Improper … GitLab 11.8.9 / 11.9.10+ Fix from $1,6002019-09-09 MEDIUM 5.4 CVE-2019-11548 An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project … GitLab 11.8.9+ Fix from $1,6002019-09-09 MEDIUM 5.3 CVE-2019-11546 An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It has a Race Co… GitLab 11.8.9 / 11.9.10+ Fix from $1,6002019-09-09 HIGH 7.2 CVE-2019-5473 An authentication issue was discovered in GitLab that allowed a bypass of email verification. This was addressed in GitLab 12.1.2 and 12.0.4. GitLab No fix yet Fix from $1,9502019-09-09 MEDIUM 5.4 CVE-2019-5467 An input validation and output encoding issue was discovered in the GitLab CE/EE wiki pages feature which could result in a persistent XSS. This vuln… GitLab 11.11.7 / 12.0.4+ Fix from $1,6002019-09-09 MEDIUM 5.4 CVE-2019-5471 An input validation and output encoding issue was discovered in the GitLab email notification feature which could result in a persistent XSS. This wa… GitLab 11.11.7 / 12.0.4+ Fix from $1,6002019-09-09 MEDIUM 5.3 CVE-2019-5463 An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnera… GitLab 11.11.7 / 12.0.4+ Fix from $1,6002019-09-09 CRITICAL 9.8 CVE-2019-14943 An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.1.4. It uses Hard-coded Credentials. GitLab after 12.1.4 Fix from $2,3002019-08-29 HIGH 7.5 CVE-2018-19584 GitLab EE, versions 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure direct object reference vulnerabili… GitLab 11.3.11 / 11.4.8+ Fix from $1,9502019-07-10 HIGH 7.7 CVE-2018-19571EPSS 28% GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an SSRF vulnerability in webhook… GitLab 11.3.11 / 11.4.8+ Fix from $1,9502019-07-10 HIGH 7.5 CVE-2018-19581 GitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure object reference vulnerab… GitLab 11.3.11 / 11.4.8+ Fix from $1,9502019-07-10 MEDIUM 6.5 CVE-2018-19578 GitLab EE, version 11.5 before 11.5.1, is vulnerable to an insecure object reference issue that permits a user with Reporter privileges to view the J… GitLab 11.5.1+ Fix from $1,6002019-07-10 MEDIUM 6.5 CVE-2018-19583 GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, perm… GitLab 11.3.11 / 11.4.8+ Fix from $1,6002019-07-10 MEDIUM 5.4 CVE-2018-19579 GitLab EE version 11.5 is vulnerable to a persistent XSS vulnerability in the Operations page. This is fixed in 11.5.1. GitLab 11.5.1+ Fix from $1,6002019-07-10 MEDIUM 5.3 CVE-2018-19580 All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not send an email to the old email address when an email address change is made. GitLab 11.3.11 / 11.4.8+ Fix from $1,6002019-07-10 HIGH 8.1 CVE-2018-19576 GitLab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an access control issue that allo… GitLab 11.3.11 / 11.4.8+ Fix from $1,9502019-07-10 HIGH 8.8 CVE-2018-19569 GitLab CE/EE, versions 8.8 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an authorization vulnerability th… GitLab 11.3.11 / 11.4.8+ Fix from $1,9502019-07-10 MEDIUM 5.9 CVE-2018-19572 GitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race condition that would allow unauthorized access to file… GitLab 11.3.11 / 11.4.8+ Fix from $1,6002019-07-10 MEDIUM 5.4 CVE-2018-19570 GitLab CE/EE, versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via… GitLab 11.3.11 / 11.4.8+ Fix from $1,6002019-07-10 MEDIUM 5.4 CVE-2018-19573 GitLab CE/EE, versions 10.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown… GitLab 11.3.11 / 11.4.8+ Fix from $1,6002019-07-10 MEDIUM 5.4 CVE-2018-19574 GitLab CE/EE, versions 7.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in the OAuth… GitLab 11.3.11 / 11.4.8+ Fix from $1,6002019-07-10 MEDIUM 6.5 CVE-2018-19496 An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. Ther… GitLab 11.3.11 / 11.4.8+ Fix from $1,6002019-07-10 MEDIUM 5.3 CVE-2018-19577 Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an incorrect access control vulne… GitLab 11.3.11 / 11.4.8+ Fix from $1,6002019-07-10 MEDIUM 6.5 CVE-2018-19495 An issue was discovered in GitLab Community and Enterprise Edition before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an SSRF v… GitLab 11.3.11 / 11.4.8+ Fix from $1,6002019-07-10 MEDIUM 6.1 CVE-2018-19493 An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is a pe… GitLab 11.3.11 / 11.4.8+ Fix from $1,6002019-07-10