Vulnerabilities
Vulnerable Software
Gitlab:  >> Gitlab  >> 8.12.5  Security Vulnerabilities
GitLab Enterprise Edition (EE) 6.7 and later through 12.5 allows SSRF.
CVSS Score
8.8
EPSS Score
0.001
Published
2020-01-03
GitLab Enterprise Edition (EE) 8.2 and later through 12.5 has Insecure Permissions.
CVSS Score
4.3
EPSS Score
0.0
Published
2020-01-03
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows SSRF.
CVSS Score
5.0
EPSS Score
0.001
Published
2019-12-30
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control.
CVSS Score
4.3
EPSS Score
0.001
Published
2019-12-30
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control.
CVSS Score
6.3
EPSS Score
0.001
Published
2019-12-30
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control.
CVSS Score
7.5
EPSS Score
0.003
Published
2019-12-30
An issue was discovered in GitLab Community and Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS.
CVSS Score
5.4
EPSS Score
0.001
Published
2019-12-30
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control (issue 2 of 6).
CVSS Score
5.3
EPSS Score
0.001
Published
2019-12-26
A denial of service exists in gitlab <v12.3.2, <v12.2.6, and <v12.1.10 that would let an attacker bypass input validation in markdown fields take down the affected page.
CVSS Score
6.5
EPSS Score
0.001
Published
2019-12-20
A authentication bypass vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.10 in the Salesforce login integration that could be used by an attacker to create an account that bypassed domain restrictions and email verification requirements.
CVSS Score
8.8
EPSS Score
0.0
Published
2019-12-18


Contact Us

Shodan ® - All rights reserved