Gitlab: >> Gitlab >> 13.12.6 Security Vulnerabilities
Improper authorization on the pipelines page in GitLab CE/EE affecting all versions since 13.12 allowed unauthorized users to view some pipeline information for public projects that have access to pipelines restricted to members only
CVSS Score
5.3
EPSS Score
0.002
Published
2021-08-23
An issue has been discovered in GitLab affecting all versions starting with 13.3. GitLab was vulnerable to a stored XSS by using the design feature in issues.
CVSS Score
6.8
EPSS Score
0.01
Published
2021-08-20
Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9.
CVSS Score
3.1
EPSS Score
0.003
Published
2021-08-20
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.11 before 13.11.7, all versions starting from 13.12 before 13.12.8, and all versions starting from 14.0 before 14.0.4. A specially crafted design image allowed attackers to read arbitrary files on the server.
CVSS Score
9.6
EPSS Score
0.002
Published
2021-08-05
Page 43