Security Vulnerabilities - CVEs Published In February 2020
An issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to package and file disclosure via request smuggling.
CVSS Score
7.5
EPSS Score
0.001
Published
2020-02-05
GitLab EE 11.0 and later through 12.7.2 allows XSS.
CVSS Score
6.1
EPSS Score
0.001
Published
2020-02-05
GitLab EE 12.2 has Insecure Permissions (issue 2 of 2).
CVSS Score
7.5
EPSS Score
0.001
Published
2020-02-05
GitLab through 12.7.2 allows XSS.
CVSS Score
6.1
EPSS Score
0.002
Published
2020-02-05
GitLab EE 10.1 through 12.7.2 allows Information Disclosure.
CVSS Score
5.3
EPSS Score
0.001
Published
2020-02-05
GitLab EE 12.4 and later through 12.7.2 has Incorrect Access Control.
CVSS Score
5.3
EPSS Score
0.001
Published
2020-02-05
GitLab EE 8.8 and later through 12.7.2 has Insecure Permissions.
CVSS Score
5.3
EPSS Score
0.001
Published
2020-02-05
GitLab EE 12.6 and later through 12.7.2 allows Denial of Service.
CVSS Score
7.5
EPSS Score
0.001
Published
2020-02-05
The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics.
CVSS Score
5.3
EPSS Score
0.002
Published
2020-02-05
The Citytv Video application 4.08.0 for Android and 3.35 for iOS sends Unencrypted Analytics.
CVSS Score
7.5
EPSS Score
0.002
Published
2020-02-05