Gitlab

GitLab

1474 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.1

CVE-2019-5883

  • EPSS 1.5%
  • Veröffentlicht 17.05.2019 16:29:03
  • Zuletzt bearbeitet 21.11.2024 04:45:42

An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition 6.0 and later but before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. The issue comments feature could allow a user to comment on an issue which t...

7.5

CVE-2018-19585

  • EPSS 14.51%
  • Veröffentlicht 17.05.2019 16:29:00
  • Zuletzt bearbeitet 21.11.2024 03:58:14

GitLab CE/EE versions 8.18 up to 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1 have CRLF Injection in Project Mirroring when using the Git protocol.

7.5

CVE-2018-20500

  • EPSS 1.42%
  • Veröffentlicht 17.05.2019 16:29:00
  • Zuletzt bearbeitet 21.11.2024 04:01:36

An insecure permissions issue was discovered in GitLab Community and Enterprise Edition 9.4 and later but before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. The runner registration token in the CI/CD settings could not be reset. This was...

7.5

CVE-2019-10112

Exploit
  • EPSS 1.28%
  • Veröffentlicht 16.05.2019 16:29:02
  • Zuletzt bearbeitet 21.11.2024 04:18:26

An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The construction of the HMAC key was insecurely derived.

4.3

CVE-2019-10116

  • EPSS 1.04%
  • Veröffentlicht 16.05.2019 15:29:01
  • Zuletzt bearbeitet 21.11.2024 04:18:26

An Insecure Permissions issue (issue 3 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. Guests of a project were allowed to see Related Branches created for an issue.

6.1

CVE-2019-10117

Exploit
  • EPSS 1.33%
  • Veröffentlicht 16.05.2019 15:29:01
  • Zuletzt bearbeitet 21.11.2024 04:18:26

An Open Redirect issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. A redirect is triggered after successful authentication within the Oauth/:GeoAuthController for the second...

7.5

CVE-2019-10113

Exploit
  • EPSS 2.08%
  • Veröffentlicht 16.05.2019 15:29:00
  • Zuletzt bearbeitet 21.11.2024 04:18:26

An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. Making concurrent GET /api/v4/projects/<id>/languages requests may allow Uncontrolled Resource Consumption.

7.5

CVE-2019-10114

Exploit
  • EPSS 2.16%
  • Veröffentlicht 16.05.2019 15:29:00
  • Zuletzt bearbeitet 21.11.2024 04:18:26

An Information Exposure issue (issue 2 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. During the OAuth authentication process, the application attempts to validate a para...

6.5

CVE-2019-10115

Exploit
  • EPSS 1.36%
  • Veröffentlicht 16.05.2019 15:29:00
  • Zuletzt bearbeitet 21.11.2024 04:18:26

An Insecure Permissions issue (issue 2 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The GitLab Releases feature could allow guest users access to private information li...

5.5

CVE-2019-10108

Exploit
  • EPSS 0.99%
  • Veröffentlicht 15.05.2019 20:29:00
  • Zuletzt bearbeitet 21.11.2024 04:18:25

An Incorrect Access Control (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. It allowed non-members of a private project/group to add and read labels.