Vulnerabilities > Gitlab > Gitlab > 13.5.1

DATE CVE VULNERABILITY TITLE RISK
2021-05-06 CVE-2021-22206 Cleartext Storage of Sensitive Information vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions starting from 11.6.
network
low complexity
gitlab CWE-312
4.0
2021-05-06 CVE-2021-22208 Missing Authorization vulnerability in Gitlab
An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7.
network
low complexity
gitlab CWE-862
4.0
2021-05-06 CVE-2021-22210 Allocation of Resources Without Limits or Throttling vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2.
network
low complexity
gitlab CWE-770
5.0
2021-04-23 CVE-2021-22205 Code Injection vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9.
network
low complexity
gitlab CWE-94
7.5
2021-04-22 CVE-2021-22199 Cross-site Scripting vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions starting with 12.9.
network
gitlab CWE-79
3.5
2021-04-02 CVE-2021-22202 Cross-Site Request Forgery (CSRF) vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all previous versions.
network
gitlab CWE-352
4.3
2021-04-02 CVE-2021-22200 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6.
network
gitlab
4.3
2021-04-02 CVE-2021-22197 Infinite Loop vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an infinite loop exist when an authenticated user with specific rights access a MR having source and target branch pointing to each other
network
low complexity
gitlab CWE-835
4.0
2021-04-02 CVE-2021-22196 Cross-site Scripting vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4.
network
gitlab CWE-79
3.5
2021-04-01 CVE-2021-22177 Resource Exhaustion vulnerability in Gitlab
Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command.
network
low complexity
gitlab CWE-400
4.0