Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2020-09-14	CVE-2020-13311	Use of Incorrectly-Resolved Name or Reference vulnerability in Gitlab A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. network low complexity gitlab CWE-706	4.3
2020-09-14	CVE-2020-13316	Unspecified vulnerability in Gitlab A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. network low complexity gitlab	4.3
2020-09-14	CVE-2020-13289	Missing Authentication for Critical Function vulnerability in Gitlab A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. network low complexity gitlab CWE-306	5.4
2020-09-14	CVE-2020-13287	Unspecified vulnerability in Gitlab A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. network low complexity gitlab	4.3
2020-09-14	CVE-2020-13284	Incorrect Authorization vulnerability in Gitlab A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. network low complexity gitlab CWE-863	6.5
2020-08-13	CVE-2020-13286	Server-Side Request Forgery (SSRF) vulnerability in Gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery. network low complexity gitlab CWE-918	4.3
2020-08-13	CVE-2020-13281	Resource Exhaustion vulnerability in Gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature network low complexity gitlab CWE-400	6.5
2020-08-13	CVE-2020-13285	Cross-site Scripting vulnerability in Gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting (XSS) vulnerability exists in the issue reference number tooltip. network low complexity gitlab CWE-79	5.4
2020-08-13	CVE-2020-13283	Cross-site Scripting vulnerability in Gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the issues list via milestone title. network low complexity gitlab CWE-79	5.4
2020-08-13	CVE-2020-13280	Resource Exhaustion vulnerability in Gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message. network low complexity gitlab CWE-400	6.5