Browse CVEs

CRITICAL 9.8 CVE-2019-9485 An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Pe… GitLab 11.6.10 / 11.7.6+ Fix from $2,3002019-05-29 CRITICAL 9.8 CVE-2019-9732 An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.… GitLab 11.6.10 / 11.7.6+ Fix from $2,3002019-05-29 MEDIUM 6.5 CVE-2019-9866 An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.7.7 and 11.8.x before 11.8.3. It allows Information Disclosure. GitLab 11.7.7 / 11.8.3+ Fix from $1,6002019-05-29 MEDIUM 5.5 CVE-2019-9221 An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect A… GitLab 11.6.10 / 11.7.6+ Fix from $1,6002019-05-29 CRITICAL 9.8 CVE-2019-9218 An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect A… GitLab 11.6.10 / 11.7.6+ Fix from $2,3002019-05-29 CRITICAL 9.1 CVE-2019-7353 An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition 11.7.x before 11.7.4. GitLab Releases were vulnerable to … GitLab 11.7.4+ Fix from $2,3002019-05-17 HIGH 7.5 CVE-2019-6797 An information disclosure issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The GitHub… GitLab 11.5.8 / 11.6.6+ Fix from $1,9502019-05-17 HIGH 7.5 CVE-2019-6781 An Improper Input Validation issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 1… GitLab 11.5.10 / 11.6.8+ Fix from $1,9502019-05-17 MEDIUM 6.5 CVE-2019-6787 An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11… GitLab 11.5.8 / 11.6.6+ Fix from $1,6002019-05-17 CRITICAL 9.1 CVE-2019-5883 An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition 6.0 and later but before 11.3.11, 11.4.x before 11.4.8, a… GitLab 11.3.11 / 11.4.8+ Fix from $2,3002019-05-17 HIGH 7.5 CVE-2018-19585EPSS 15% GitLab CE/EE versions 8.18 up to 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1 have CRLF Injection in Project Mirroring when us… GitLab 11.3.11 / 11.4.8+ Fix from $1,9502019-05-17 HIGH 7.5 CVE-2018-20500 An insecure permissions issue was discovered in GitLab Community and Enterprise Edition 9.4 and later but before 11.4.13, 11.5.x before 11.5.6, and 1… GitLab 11.4.13 / 11.5.6+ Fix from $1,9502019-05-17 HIGH 7.5 CVE-2019-10112 An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The construction of… GitLab 11.7.8 / 11.8.4+ Fix from $1,9502019-05-16 MEDIUM 6.1 CVE-2019-10117 An Open Redirect issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. A red… GitLab 11.7.8 / 11.8.4+ Fix from $1,6002019-05-16 HIGH 7.5 CVE-2019-10113 An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. Making concurrent G… GitLab 11.7.8 / 11.8.4+ Fix from $1,9502019-05-16 HIGH 7.5 CVE-2019-10114 An Information Exposure issue (issue 2 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.… GitLab 11.7.8 / 11.8.4+ Fix from $1,9502019-05-16 MEDIUM 6.5 CVE-2019-10115 An Insecure Permissions issue (issue 2 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.… GitLab 11.7.8 / 11.8.4+ Fix from $1,6002019-05-16 MEDIUM 6.5 CVE-2019-10110 An Insecure Permissions issue (issue 1 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.… GitLab 11.7.8 / 11.8.4+ Fix from $1,6002019-05-15 MEDIUM 5.4 CVE-2019-10108 An Incorrect Access Control (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x … GitLab 11.7.8 / 11.8.4+ Fix from $1,6002019-05-15 MEDIUM 5.4 CVE-2019-10111 An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. It allows persisten… GitLab 11.7.8 / 11.8.4+ Fix from $1,6002019-05-15 MEDIUM 5.3 CVE-2019-10109 An Information Exposure issue (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.… GitLab 11.7.8 / 11.8.4+ Fix from $1,6002019-05-15 HIGH 7.5 CVE-2019-10640 An issue was discovered in GitLab Community and Enterprise Edition before 11.7.10, 11.8.x before 11.8.6, and 11.9.x before 11.9.4. A regex input vali… GitLab 11.7.10 / 11.8.6+ Fix from $1,9502019-05-15 MEDIUM 6.5 CVE-2019-11000 An issue was discovered in GitLab Enterprise Edition before 11.7.11, 11.8.x before 11.8.7, and 11.9.x before 11.9.7. It allows Information Disclosure. GitLab 11.7.11 / 11.8.7+ Fix from $1,6002019-05-10 HIGH 8.8 CVE-2018-19359 GitLab Community and Enterprise Edition 8.9 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 has Incorrect Access Control. GitLab 11.3.10 / 11.4.6+ Fix from $1,9502019-04-25 MEDIUM 6.1 CVE-2018-18643 GitLab CE & EE 11.2 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 have Persistent XSS. GitLab 11.3.10 / 11.4.6+ Fix from $1,6002019-04-25 CRITICAL 9.8 CVE-2019-9217 An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. Its User Interface… GitLab 11.6.10 / 11.7.6+ Fix from $2,3002019-04-17 CRITICAL 9.8 CVE-2019-9756 An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.… GitLab 11.6.10 / 11.8.1+ Fix from $2,3002019-04-17 CRITICAL 9.1 CVE-2019-9890 An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It h… GitLab 11.6.10 / 11.7.6+ Fix from $2,3002019-04-17 HIGH 8.1 CVE-2019-9222 An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Pe… GitLab 11.6.10 / 11.7.6+ Fix from $1,9502019-04-17 HIGH 7.5 CVE-2019-9220 An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Uncontro… GitLab 11.6.10 / 11.7.6+ Fix from $1,9502019-04-17