Vulnerabilities > Gitlab > High

DATE CVE VULNERABILITY TITLE RISK
2019-04-04 CVE-2018-20229 Path Traversal vulnerability in Gitlab
GitLab Community and Enterprise Edition before 11.3.14, 11.4.x before 11.4.12, and 11.5.x before 11.5.5 allows Directory Traversal.
network
low complexity
gitlab CWE-22
7.5
2019-03-28 CVE-2018-20144 Path Traversal vulnerability in Gitlab
GitLab Community and Enterprise Edition 11.x before 11.3.13, 11.4.x before 11.4.11, and 11.5.x before 11.5.4 has Incorrect Access Control.
network
low complexity
gitlab CWE-22
7.5
2019-03-26 CVE-2018-19856 Path Traversal vulnerability in Gitlab
GitLab CE/EE before 11.3.12, 11.4.x before 11.4.10, and 11.5.x before 11.5.3 allows Directory Traversal in Templates API.
network
low complexity
gitlab CWE-22
7.5
2019-03-25 CVE-2019-6240 Path Traversal vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.
network
low complexity
gitlab CWE-22
7.5
2018-12-04 CVE-2018-18648 Information Exposure vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3.
network
low complexity
gitlab CWE-200
7.5
2018-12-04 CVE-2018-18646 Server-Side Request Forgery (SSRF) vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3.
network
low complexity
gitlab CWE-918
8.8
2018-12-04 CVE-2018-17939 Information Exposure vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2.
network
low complexity
gitlab CWE-200
7.5
2018-07-27 CVE-2018-14603 Cross-Site Request Forgery (CSRF) vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2.
network
low complexity
gitlab CWE-352
8.8
2018-07-27 CVE-2018-14602 Information Exposure vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2.
network
low complexity
gitlab CWE-200
7.5
2018-07-27 CVE-2018-14601 Unspecified vulnerability in Gitlab 11.1.0/11.1.1
An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.2.
network
low complexity
gitlab
7.5