Browse CVEs

MEDIUM 6.1 CVE-2018-16050 An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.5 and 11.2.x before 11.2.2. There is Persistent XSS in the Merg… GitLab 11.1.5 / 11.2.2+ Fix from $1,6002018-10-03 MEDIUM 5.4 CVE-2018-12605 An issue was discovered in GitLab Community Edition and Enterprise Edition 10.7.x before 10.7.6. The usage of 'url_for' contained a XSS issue due to … GitLab 10.7.6+ Fix from $1,6002018-08-03 MEDIUM 5.4 CVE-2018-12606 An issue was discovered in GitLab Community Edition and Enterprise Edition before 10.7.6, 10.8.x before 10.8.5, and 11.x before 11.0.1. The wiki cont… GitLab 10.7.6 / 10.8.5+ Fix from $1,6002018-08-03 MEDIUM 5.4 CVE-2018-12607 An issue was discovered in GitLab Community Edition and Enterprise Edition before 10.7.6, 10.8.x before 10.8.5, and 11.x before 11.0.1. The charts fe… GitLab 10.7.6 / 10.8.5+ Fix from $1,6002018-08-03 HIGH 8.8 CVE-2018-14603 An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. CSRF can occur in t… GitLab 10.8.7 / 11.0.5+ Fix from $1,9502018-07-27 HIGH 7.5 CVE-2018-14601 An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.2. A Denial of Service can occur because Markdown rendering tim… GitLab 11.1.2+ Fix from $1,9502018-07-27 HIGH 7.5 CVE-2018-14602 An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. Information Disclos… GitLab 10.8.7 / 11.0.5+ Fix from $1,9502018-07-27 MEDIUM 6.1 CVE-2018-14604 An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. XSS can occur in th… GitLab 10.8.7 / 11.0.5+ Fix from $1,6002018-07-27 MEDIUM 5.4 CVE-2018-14605 An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. XSS can occur in th… GitLab 10.8.7 / 11.0.5+ Fix from $1,6002018-07-27 MEDIUM 5.4 CVE-2018-14606 An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. XSS can occur via a… GitLab 10.8.7 / 11.0.5+ Fix from $1,6002018-07-27 CRITICAL 9.8 CVE-2018-14364EPSS 50% GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and … GitLab 10.7.7 / 10.8.6+ Fix from $2,3002018-07-18 HIGH 8.1 CVE-2017-0921 GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsCont… GitLab 10.1.6 / 10.2.6+ Fix from $1,9502018-07-03 HIGH 7.5 CVE-2017-0919 GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the GitLab import compo… GitLab 10.1.6 / 10.2.6+ Fix from $1,9502018-07-03 MEDIUM 6.1 CVE-2018-10379 An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 10.5.8, 10.6.x before 10.6.5, and 10.7.x before 10.7.2. T… GitLab 10.5.8 / 10.6.5+ Fix from $1,6002018-05-31 MEDIUM 6.5 CVE-2018-8801 GitLab Community and Enterprise Editions version 8.3 up to 10.x before 10.3 are vulnerable to SSRF in the Services and webhooks component. GitLab 10.3+ Fix from $1,6002018-04-25 MEDIUM 6.1 CVE-2018-9243 GitLab Community and Enterprise Editions version 8.4 up to 10.4 are vulnerable to XSS because a lack of input validation in the merge request compone… GitLab 10.4.7 / 10.5.7+ Fix from $1,6002018-04-05 MEDIUM 6.1 CVE-2018-9244 GitLab Community and Enterprise Editions version 9.2 up to 10.4 are vulnerable to XSS because a lack of input validation in the milestones component … GitLab 10.4.7 / 10.5.7+ Fix from $1,6002018-04-05 CRITICAL 9.8 CVE-2018-8971 The Auth0 integration in GitLab before 10.3.9, 10.4.x before 10.4.6, and 10.5.x before 10.5.6 has an incorrect omniauth-auth0 configuration, leading … GitLab after 10.5.5 Fix from $2,3002018-03-24 HIGH 7.8 CVE-2018-3710 Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote … GitLab after 10.3.3 Fix from $1,9502018-03-21 CRITICAL 9.8 CVE-2017-0915EPSS 6% Gitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the GitlabProjectsImportService resulting in remote code execu… GitLab after 10.3.3 Fix from $2,3002018-03-21 CRITICAL 9.8 CVE-2017-0916EPSS 6% Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the system_hook_push queue through web hook component resulting … GitLab after 10.3.3 Fix from $2,3002018-03-21 HIGH 8.8 CVE-2017-0918 Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution. GitLab after 10.3.3 Fix from $1,9502018-03-21 HIGH 8.8 CVE-2017-0926 Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component resulting in unauthorized user … GitLab after 10.3.3 Fix from $1,9502018-03-21 HIGH 7.5 CVE-2017-0914 Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting … GitLab after 10.3.3 Fix from $1,9502018-03-21 HIGH 7.5 CVE-2017-0922 Gitlab Enterprise Edition version 10.3 is vulnerable to an authorization bypass issue in the GitLab Projects::BoardsController component resulting in… GitLab after 10.3.3 Fix from $1,9502018-03-21 HIGH 7.2 CVE-2017-0925 Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoin… GitLab after 10.3.3 Fix from $1,9502018-03-21 MEDIUM 6.5 CVE-2017-0927 Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use… GitLab after 10.3.3 Fix from $1,6002018-03-21 MEDIUM 6.1 CVE-2017-0917 Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in persistent cross site scriptin… GitLab after 10.3.3 Fix from $1,6002018-03-21 MEDIUM 6.1 CVE-2017-0923 Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site … GitLab Mitigation only Fix from $1,6002018-03-21 MEDIUM 6.1 CVE-2017-0924 Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scriptin… GitLab after 10.3.3 Fix from $1,6002018-03-21