Vulnerabilities > Gitlab > Gitlab > 7.10.1

DATE CVE VULNERABILITY TITLE RISK
2020-03-13 CVE-2020-10081 Incorrect Authorization vulnerability in Gitlab
GitLab before 12.8.2 has Incorrect Access Control.
network
low complexity
gitlab CWE-863
4.0
2020-03-13 CVE-2020-10079 Missing Authentication for Critical Function vulnerability in Gitlab
GitLab 7.10 through 12.8.1 has Incorrect Access Control.
network
low complexity
gitlab CWE-306
5.0
2020-03-10 CVE-2019-13003 Resource Exhaustion vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 12.0.3.
network
low complexity
gitlab CWE-400
5.0
2020-03-10 CVE-2019-12428 Unspecified vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition 6.8 through 11.11.
network
low complexity
gitlab
7.5
2020-02-14 CVE-2019-15594 Unspecified vulnerability in Gitlab
GitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of restricted pipelines via the merge request endpoint.
network
low complexity
gitlab
4.0
2020-02-05 CVE-2020-7973 Cross-site Scripting vulnerability in Gitlab
GitLab through 12.7.2 allows XSS.
network
gitlab CWE-79
4.3
2020-02-05 CVE-2020-7968 Improper Authentication vulnerability in Gitlab
GitLab EE 8.0 through 12.7.2 has Incorrect Access Control.
network
low complexity
gitlab CWE-287
5.0
2020-01-13 CVE-2020-5197 Incorrect Authorization vulnerability in Gitlab
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 5.1 through 12.6.1.
network
gitlab CWE-863
3.5
2020-01-03 CVE-2019-19261 Server-Side Request Forgery (SSRF) vulnerability in Gitlab
GitLab Enterprise Edition (EE) 6.7 and later through 12.5 allows SSRF.
network
gitlab CWE-918
6.8
2020-01-03 CVE-2019-19260 Unspecified vulnerability in Gitlab
GitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access Control (issue 2 of 2).
network
low complexity
gitlab
5.5