Vulnerabilities > Gitlab > Gitlab > 12.4.7

DATE CVE VULNERABILITY TITLE RISK
2020-03-13 CVE-2020-10080 Information Exposure vulnerability in Gitlab
GitLab 8.3 through 12.8.1 allows Information Disclosure.
network
low complexity
gitlab CWE-200
5.0
2020-03-13 CVE-2020-10079 Missing Authentication for Critical Function vulnerability in Gitlab
GitLab 7.10 through 12.8.1 has Incorrect Access Control.
network
low complexity
gitlab CWE-306
5.0
2020-03-13 CVE-2020-10078 Cross-site Scripting vulnerability in Gitlab
GitLab 12.1 through 12.8.1 allows XSS.
network
gitlab CWE-79
4.3
2020-03-06 CVE-2020-8113 Improper Privilege Management vulnerability in Gitlab
GitLab 10.7 and later through 12.7.2 has Incorrect Access Control.
network
low complexity
gitlab CWE-269
7.5
2020-02-17 CVE-2019-12825 Insecure Storage of Sensitive Information vulnerability in Gitlab
Unauthorized Access to the Container Registry of other groups was discovered in GitLab Enterprise 12.0.0-pre.
network
low complexity
gitlab CWE-922
4.0
2020-02-05 CVE-2020-6833 Information Exposure vulnerability in Gitlab
An issue was discovered in GitLab EE 11.3 and later.
network
low complexity
gitlab CWE-200
5.0
2020-02-05 CVE-2020-7977 Incorrect Default Permissions vulnerability in Gitlab
GitLab EE 8.8 and later through 12.7.2 has Insecure Permissions.
network
gitlab CWE-276
4.3
2020-02-05 CVE-2020-7976 Information Exposure vulnerability in Gitlab
GitLab EE 12.4 and later through 12.7.2 has Incorrect Access Control.
network
low complexity
gitlab CWE-200
5.0
2020-02-05 CVE-2020-7974 Information Exposure vulnerability in Gitlab
GitLab EE 10.1 through 12.7.2 allows Information Disclosure.
network
low complexity
gitlab CWE-200
5.0
2020-02-05 CVE-2020-7973 Cross-site Scripting vulnerability in Gitlab
GitLab through 12.7.2 allows XSS.
network
gitlab CWE-79
4.3