Vulnerabilities > Gitlab > Gitlab > 12.6.5

DATE CVE VULNERABILITY TITLE RISK
2020-02-17 CVE-2020-8795 Missing Authorization vulnerability in Gitlab
In GitLab Enterprise Edition (EE) 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users.
network
low complexity
gitlab CWE-862
5.0
2020-02-05 CVE-2020-6833 Information Exposure vulnerability in Gitlab
An issue was discovered in GitLab EE 11.3 and later.
network
low complexity
gitlab CWE-200
5.0
2020-02-05 CVE-2020-7978 Unspecified vulnerability in Gitlab
GitLab EE 12.6 and later through 12.7.2 allows Denial of Service.
network
low complexity
gitlab
5.0
2020-02-05 CVE-2020-7977 Incorrect Default Permissions vulnerability in Gitlab
GitLab EE 8.8 and later through 12.7.2 has Insecure Permissions.
network
gitlab CWE-276
4.3
2020-02-05 CVE-2020-7976 Information Exposure vulnerability in Gitlab
GitLab EE 12.4 and later through 12.7.2 has Incorrect Access Control.
network
low complexity
gitlab CWE-200
5.0
2020-02-05 CVE-2020-7974 Information Exposure vulnerability in Gitlab
GitLab EE 10.1 through 12.7.2 allows Information Disclosure.
network
low complexity
gitlab CWE-200
5.0
2020-02-05 CVE-2020-7973 Cross-site Scripting vulnerability in Gitlab
GitLab through 12.7.2 allows XSS.
network
gitlab CWE-79
4.3
2020-02-05 CVE-2020-7972 Incorrect Default Permissions vulnerability in Gitlab
GitLab EE 12.2 has Insecure Permissions (issue 2 of 2).
network
low complexity
gitlab CWE-276
5.0
2020-02-05 CVE-2020-7971 Cross-site Scripting vulnerability in Gitlab
GitLab EE 11.0 and later through 12.7.2 allows XSS.
network
gitlab CWE-79
4.3
2020-02-05 CVE-2020-7969 Information Exposure vulnerability in Gitlab
GitLab EE 8.0 and later through 12.7.2 allows Information Disclosure.
network
low complexity
gitlab CWE-200
5.0