Gitlab

GitLab

1474 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2019-10109

Exploit
  • EPSS 1.96%
  • Veröffentlicht 15.05.2019 20:29:00
  • Zuletzt bearbeitet 21.11.2024 04:18:25

An Information Exposure issue (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. EXIF geolocation data were not removed from images when uploaded to GitLab. As a res...

6.5

CVE-2019-10110

Exploit
  • EPSS 1.19%
  • Veröffentlicht 15.05.2019 20:29:00
  • Zuletzt bearbeitet 21.11.2024 04:18:25

An Insecure Permissions issue (issue 1 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The "move issue" feature may allow a user to create projects under any namespace on ...

5.4

CVE-2019-10111

Exploit
  • EPSS 0.96%
  • Veröffentlicht 15.05.2019 20:29:00
  • Zuletzt bearbeitet 21.11.2024 04:18:25

An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. It allows persistent XSS in the merge request "resolve conflicts" page.

7.5

CVE-2019-10640

Exploit
  • EPSS 2.22%
  • Veröffentlicht 15.05.2019 19:29:00
  • Zuletzt bearbeitet 21.11.2024 04:19:38

An issue was discovered in GitLab Community and Enterprise Edition before 11.7.10, 11.8.x before 11.8.6, and 11.9.x before 11.9.4. A regex input validation issue for the .gitlab-ci.yml refs value allows Uncontrolled Resource Consumption.

6.5

CVE-2019-11000

  • EPSS 1.82%
  • Veröffentlicht 10.05.2019 20:29:00
  • Zuletzt bearbeitet 21.11.2024 04:20:19

An issue was discovered in GitLab Enterprise Edition before 11.7.11, 11.8.x before 11.8.7, and 11.9.x before 11.9.7. It allows Information Disclosure.

6.1

CVE-2018-18643

  • EPSS 1.16%
  • Veröffentlicht 25.04.2019 21:29:00
  • Zuletzt bearbeitet 21.11.2024 03:56:17

GitLab CE & EE 11.2 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 have Persistent XSS.

8.8

CVE-2018-19359

Exploit
  • EPSS 1.95%
  • Veröffentlicht 25.04.2019 21:29:00
  • Zuletzt bearbeitet 21.11.2024 03:57:48

GitLab Community and Enterprise Edition 8.9 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 has Incorrect Access Control.

9.8

CVE-2019-9217

  • EPSS 1.32%
  • Veröffentlicht 17.04.2019 17:29:01
  • Zuletzt bearbeitet 21.11.2024 04:51:13

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. Its User Interface has a Misrepresentation of Critical Information.

4.3

CVE-2019-9219

Exploit
  • EPSS 1.26%
  • Veröffentlicht 17.04.2019 17:29:01
  • Zuletzt bearbeitet 21.11.2024 04:51:14

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control (issue 2 of 5).

7.5

CVE-2019-9220

Exploit
  • EPSS 2.78%
  • Veröffentlicht 17.04.2019 17:29:01
  • Zuletzt bearbeitet 21.11.2024 04:51:14

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Uncontrolled Resource Consumption.