Vulnerabilities > Gitlab

DATE CVE VULNERABILITY TITLE RISK
2020-03-13 CVE-2020-10080 Unspecified vulnerability in Gitlab
GitLab 8.3 through 12.8.1 allows Information Disclosure.
network
low complexity
gitlab
5.3
2020-03-13 CVE-2020-10079 Missing Authentication for Critical Function vulnerability in Gitlab
GitLab 7.10 through 12.8.1 has Incorrect Access Control.
network
low complexity
gitlab CWE-306
5.3
2020-03-13 CVE-2020-10078 Cross-site Scripting vulnerability in Gitlab
GitLab 12.1 through 12.8.1 allows XSS.
network
low complexity
gitlab CWE-79
6.1
2020-03-12 CVE-2020-10535 Unspecified vulnerability in Gitlab
GitLab 12.8.x before 12.8.6, when sign-up is enabled, allows remote attackers to bypass email domain restrictions within the two-day grace period for an unconfirmed email address.
network
low complexity
gitlab
5.3
2020-03-10 CVE-2019-13121 Server-Side Request Forgery (SSRF) vulnerability in Gitlab
An issue was discovered in GitLab Enterprise Edition 10.6 through 12.0.2.
network
low complexity
gitlab CWE-918
7.5
2020-03-10 CVE-2019-13011 Resource Exhaustion vulnerability in Gitlab
An issue was discovered in GitLab Enterprise Edition 8.11.0 through 12.0.2.
network
low complexity
gitlab CWE-400
4.3
2020-03-10 CVE-2019-13010 Unspecified vulnerability in Gitlab
An issue was discovered in GitLab Enterprise Edition 8.3 through 12.0.2.
network
high complexity
gitlab
5.9
2020-03-10 CVE-2019-13009 Incorrect Permission Assignment for Critical Resource vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition 9.2 through 12.0.2.
network
low complexity
gitlab CWE-732
6.5
2020-03-10 CVE-2019-13007 Resource Exhaustion vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition 11.11 through 12.0.2.
network
low complexity
gitlab CWE-400
4.9
2020-03-10 CVE-2019-13006 Unspecified vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition 9.0 and through 12.0.2.
network
low complexity
gitlab
4.3