Vulnerabilities > Gitlab > Gitlab > 13.8.6

DATE CVE VULNERABILITY TITLE RISK
2021-05-06 CVE-2021-22210 Allocation of Resources Without Limits or Throttling vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2.
network
low complexity
gitlab CWE-770
5.0
2021-05-06 CVE-2021-22211 Incorrect Authorization vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.
network
gitlab CWE-863
3.5
2021-04-23 CVE-2021-22205 Code Injection vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9.
network
low complexity
gitlab CWE-94
7.5
2021-04-22 CVE-2021-22199 Cross-site Scripting vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions starting with 12.9.
network
gitlab CWE-79
3.5
2021-04-02 CVE-2021-22203 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.9 before 13.8.7, all versions starting from 13.9 before 13.9.5, and all versions starting from 13.10 before 13.10.1.
network
low complexity
gitlab
7.5
2021-04-02 CVE-2021-22202 Cross-Site Request Forgery (CSRF) vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all previous versions.
network
gitlab CWE-352
4.3
2021-04-02 CVE-2021-22200 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6.
network
gitlab
4.3
2021-04-02 CVE-2021-22198 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing an authenticated user to delete incident metric images of public projects.
network
low complexity
gitlab
4.0
2021-04-02 CVE-2021-22197 Infinite Loop vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an infinite loop exist when an authenticated user with specific rights access a MR having source and target branch pointing to each other
network
low complexity
gitlab CWE-835
4.0
2021-04-02 CVE-2021-22196 Cross-site Scripting vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4.
network
gitlab CWE-79
3.5