Vulnerabilities > Gitlab > Gitlab > 12.7

DATE CVE VULNERABILITY TITLE RISK
2020-03-13 CVE-2020-10085 Information Exposure vulnerability in Gitlab
GitLab 12.3.5 through 12.8.1 allows Information Disclosure.
network
low complexity
gitlab CWE-200
5.0
2020-03-13 CVE-2020-10084 Information Exposure vulnerability in Gitlab
GitLab EE 11.6 through 12.8.1 allows Information Disclosure.
network
low complexity
gitlab CWE-200
5.0
2020-03-13 CVE-2020-10082 Unspecified vulnerability in Gitlab
GitLab 12.2 through 12.8.1 allows Denial of Service.
network
low complexity
gitlab
5.0
2020-03-13 CVE-2020-10081 Incorrect Authorization vulnerability in Gitlab
GitLab before 12.8.2 has Incorrect Access Control.
network
low complexity
gitlab CWE-863
4.0
2020-03-13 CVE-2020-10080 Information Exposure vulnerability in Gitlab
GitLab 8.3 through 12.8.1 allows Information Disclosure.
network
low complexity
gitlab CWE-200
5.0
2020-03-13 CVE-2020-10079 Missing Authentication for Critical Function vulnerability in Gitlab
GitLab 7.10 through 12.8.1 has Incorrect Access Control.
network
low complexity
gitlab CWE-306
5.0
2020-03-13 CVE-2020-10078 Cross-site Scripting vulnerability in Gitlab
GitLab 12.1 through 12.8.1 allows XSS.
network
gitlab CWE-79
4.3
2020-02-17 CVE-2020-8795 Missing Authorization vulnerability in Gitlab
In GitLab Enterprise Edition (EE) 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users.
network
low complexity
gitlab CWE-862
5.0
2020-02-05 CVE-2020-7967 Incorrect Default Permissions vulnerability in Gitlab
GitLab EE 8.0 through 12.7.2 has Insecure Permissions (issue 1 of 2).
network
low complexity
gitlab CWE-276
4.0