Gitlab

GitLab

1474 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2019-15585

  • EPSS 1.63%
  • Veröffentlicht 28.01.2020 03:15:10
  • Zuletzt bearbeitet 21.11.2024 04:29:04

Improper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) in the GitLab SAML integration had a validation issue that permitted an attacker to takeover another user's account.

6.1

CVE-2019-15586

  • EPSS 0.76%
  • Veröffentlicht 28.01.2020 03:15:10
  • Zuletzt bearbeitet 21.11.2024 04:29:04

A XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin.

7.5

CVE-2019-15590

  • EPSS 1.11%
  • Veröffentlicht 28.01.2020 03:15:10
  • Zuletzt bearbeitet 21.11.2024 04:29:05

An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE) and Enterprise Edition (EE) where private merge requests and issues would be disclosed with the Group Search feature provided by Elasticsearch integ...

8.8

CVE-2019-5462

Exploit
  • EPSS 2.53%
  • Veröffentlicht 28.01.2020 03:15:10
  • Zuletzt bearbeitet 21.11.2024 04:44:58

A privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are not rotated once ownership of them has changed.

9.8

CVE-2019-5464

Exploit
  • EPSS 2.8%
  • Veröffentlicht 28.01.2020 03:15:10
  • Zuletzt bearbeitet 21.11.2024 04:44:59

A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which could result in SSRF where the library is utilized.

4.3

CVE-2019-5465

Exploit
  • EPSS 1.13%
  • Veröffentlicht 28.01.2020 03:15:10
  • Zuletzt bearbeitet 21.11.2024 04:44:59

An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosure of the newly created issue ID.

4.3

CVE-2019-20142

  • EPSS 0.89%
  • Veröffentlicht 13.01.2020 21:15:11
  • Zuletzt bearbeitet 21.11.2024 04:38:05

An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 12.3 through 12.6.1. It allows Denial of Service.

5.3

CVE-2019-20143

  • EPSS 0.88%
  • Veröffentlicht 13.01.2020 21:15:11
  • Zuletzt bearbeitet 21.11.2024 04:38:05

An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 12.6. It has Incorrect Access Control.

4.3

CVE-2019-20144

  • EPSS 0.69%
  • Veröffentlicht 13.01.2020 21:15:11
  • Zuletzt bearbeitet 21.11.2024 04:38:05

An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 10.8 through 12.6.1. It has Incorrect Access Control.

5.3

CVE-2020-6832

  • EPSS 0.93%
  • Veröffentlicht 13.01.2020 20:15:14
  • Zuletzt bearbeitet 21.11.2024 05:36:15

An issue was discovered in GitLab Enterprise Edition (EE) 8.9.0 through 12.6.1. Using the project import feature, it was possible for someone to obtain issues from private projects.