Vulnerabilities > Gitlab > Gitlab > 13.7.9

DATE CVE VULNERABILITY TITLE RISK
2021-06-08 CVE-2021-22214 Server-Side Request Forgery (SSRF) vulnerability in Gitlab
When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is limited
network
low complexity
gitlab CWE-918
8.6
2021-05-06 CVE-2021-22206 Cleartext Storage of Sensitive Information vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions starting from 11.6.
network
low complexity
gitlab CWE-312
4.9
2021-05-06 CVE-2021-22208 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7.
network
low complexity
gitlab
4.3
2021-05-06 CVE-2021-22210 Allocation of Resources Without Limits or Throttling vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2.
network
low complexity
gitlab CWE-770
5.3
2021-05-06 CVE-2021-22211 Incorrect Authorization vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.
network
low complexity
gitlab CWE-863
4.3
2021-04-23 CVE-2021-22205 Code Injection vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9.
network
low complexity
gitlab CWE-94
critical
10.0
2021-04-22 CVE-2021-22199 Cross-site Scripting vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions starting with 12.9.
network
low complexity
gitlab CWE-79
5.4
2021-04-02 CVE-2021-22203 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.9 before 13.8.7, all versions starting from 13.9 before 13.9.5, and all versions starting from 13.10 before 13.10.1.
network
low complexity
gitlab
critical
9.8
2021-04-02 CVE-2021-22202 Cross-Site Request Forgery (CSRF) vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all previous versions.
network
low complexity
gitlab CWE-352
4.3
2021-04-02 CVE-2021-22200 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6.
network
low complexity
gitlab
7.5