Vulnerabilities > Gitlab

DATE CVE VULNERABILITY TITLE RISK
2020-09-15 CVE-2020-13308 Improper Preservation of Permissions vulnerability in Gitlab
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
network
low complexity
gitlab CWE-281
2.7
2020-09-15 CVE-2020-13307 Insufficient Session Expiration vulnerability in Gitlab
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
network
low complexity
gitlab CWE-613
4.7
2020-09-15 CVE-2020-13303 Improper Authentication vulnerability in Gitlab
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
network
low complexity
gitlab CWE-287
6.5
2020-09-14 CVE-2020-13315 Unspecified vulnerability in Gitlab
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
network
low complexity
gitlab
7.5
2020-09-14 CVE-2020-13310 Unspecified vulnerability in Gitlab
A vulnerability was discovered in GitLab runner versions before 13.1.3, 13.2.3 and 13.3.1.
network
low complexity
gitlab
6.5
2020-09-14 CVE-2020-13309 Server-Side Request Forgery (SSRF) vulnerability in Gitlab
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
network
low complexity
gitlab CWE-918
8.8
2020-09-14 CVE-2020-13306 Allocation of Resources Without Limits or Throttling vulnerability in Gitlab
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
network
low complexity
gitlab CWE-770
7.5
2020-09-14 CVE-2020-13305 Insufficient Session Expiration vulnerability in Gitlab
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
network
low complexity
gitlab CWE-613
4.3
2020-09-14 CVE-2020-13304 Use of Insufficiently Random Values vulnerability in Gitlab
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
network
low complexity
gitlab CWE-330
7.2
2020-09-14 CVE-2020-13302 Insufficient Session Expiration vulnerability in Gitlab
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4.
network
low complexity
gitlab CWE-613
7.2