Vulnerabilities > Gitlab > Gitlab > 13.9.2

DATE CVE VULNERABILITY TITLE RISK
2021-04-22 CVE-2021-22199 Cross-site Scripting vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions starting with 12.9.
network
gitlab CWE-79
3.5
2021-04-02 CVE-2021-22203 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.9 before 13.8.7, all versions starting from 13.9 before 13.9.5, and all versions starting from 13.10 before 13.10.1.
network
low complexity
gitlab
7.5
2021-04-02 CVE-2021-22202 Cross-Site Request Forgery (CSRF) vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all previous versions.
network
gitlab CWE-352
4.3
2021-04-02 CVE-2021-22201 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9.
network
low complexity
gitlab
4.0
2021-04-02 CVE-2021-22200 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6.
network
gitlab
4.3
2021-04-02 CVE-2021-22198 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing an authenticated user to delete incident metric images of public projects.
network
low complexity
gitlab
4.0
2021-04-02 CVE-2021-22197 Infinite Loop vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an infinite loop exist when an authenticated user with specific rights access a MR having source and target branch pointing to each other
network
low complexity
gitlab CWE-835
4.0
2021-04-02 CVE-2021-22196 Cross-site Scripting vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4.
network
gitlab CWE-79
3.5
2021-03-24 CVE-2021-22192 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on the server.
network
low complexity
gitlab
6.5