Vulnerabilities > Gitlab > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-03-26 CVE-2021-22172 Information Exposure vulnerability in Gitlab
Improper authorization in GitLab 12.8+ allows a guest user in a private project to view tag data that should be inaccessible on the releases page
network
low complexity
gitlab CWE-200
4.3
2021-03-24 CVE-2021-22169 Information Exposure Through an Error Message vulnerability in Gitlab
An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages.
network
low complexity
gitlab CWE-209
4.3
2021-03-24 CVE-2021-22186 Incorrect Authorization vulnerability in Gitlab
An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricted to group owners
network
low complexity
gitlab CWE-863
4.9
2021-03-24 CVE-2021-22185 Cross-site Scripting vulnerability in Gitlab
Insufficient input sanitization in wikis in GitLab version 13.8 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted commit to a wiki
network
low complexity
gitlab CWE-79
5.4
2021-03-24 CVE-2021-22179 Server-Side Request Forgery (SSRF) vulnerability in Gitlab
A vulnerability was discovered in GitLab versions before 12.2.
network
low complexity
gitlab CWE-918
5.4
2021-03-24 CVE-2021-22178 Server-Side Request Forgery (SSRF) vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions starting from 13.2.
network
low complexity
gitlab CWE-918
5.0
2021-03-24 CVE-2021-22176 Incorrect Authorization vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions starting with 3.0.1.
network
low complexity
gitlab CWE-863
4.3
2021-03-04 CVE-2021-22183 Cross-site Scripting vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions starting with 11.8.
network
low complexity
gitlab CWE-79
5.4
2021-03-03 CVE-2021-22188 Unspecified vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions starting with 13.0.
network
low complexity
gitlab
5.3
2021-03-03 CVE-2021-22182 Cross-site Scripting vulnerability in Gitlab
An issue has been discovered in GitLab affecting all versions starting with 13.7.
network
low complexity
gitlab CWE-79
5.4