Vulnerabilities > Gitlab

DATE CVE VULNERABILITY TITLE RISK
2019-04-17 CVE-2019-9174 Server-Side Request Forgery (SSRF) vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1.
network
low complexity
gitlab CWE-918
critical
10.0
2019-04-17 CVE-2019-9172 Unspecified vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1.
network
high complexity
gitlab
5.9
2019-04-17 CVE-2019-9171 Missing Authorization vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1.
network
high complexity
gitlab CWE-862
3.7
2019-04-17 CVE-2019-9170 Authorization Bypass Through User-Controlled Key vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1.
network
low complexity
gitlab CWE-639
5.3
2019-04-16 CVE-2019-7155 Improper Privilege Management vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1.
network
low complexity
gitlab CWE-269
6.5
2019-04-11 CVE-2019-6796 Cross-site Scripting vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1.
network
low complexity
gitlab CWE-79
6.1
2019-04-04 CVE-2018-20229 Path Traversal vulnerability in Gitlab
GitLab Community and Enterprise Edition before 11.3.14, 11.4.x before 11.4.12, and 11.5.x before 11.5.5 allows Directory Traversal.
network
low complexity
gitlab CWE-22
7.5
2019-03-28 CVE-2018-20144 Path Traversal vulnerability in Gitlab
GitLab Community and Enterprise Edition 11.x before 11.3.13, 11.4.x before 11.4.11, and 11.5.x before 11.5.4 has Incorrect Access Control.
network
low complexity
gitlab CWE-22
7.5
2019-03-26 CVE-2018-19856 Path Traversal vulnerability in Gitlab
GitLab CE/EE before 11.3.12, 11.4.x before 11.4.10, and 11.5.x before 11.5.3 allows Directory Traversal in Templates API.
network
low complexity
gitlab CWE-22
7.5
2019-03-25 CVE-2019-6240 Path Traversal vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.
network
low complexity
gitlab CWE-22
7.5