Information Disclosure

Every one of the 136 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Gitlab CE/EE 13.4 - 13.6.2 - Information DisclosureCVE-2020-26413GitLab · CVSS 5.3 · 35% likely

   CWE-200

2. GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab. Added in GitLab 8.9, this feature allows a user to export and th…CVE-2016-9086Gitlab · 5.4% likely

   CWE-200

3. An Information Exposure issue (issue 2 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. During the OA…CVE-2019-10114Gitlab · 2.2% likely

   CWE-203

4. An issue was discovered in GitLab Community and Enterprise Edition before 11.0.6, 11.1.x before 11.1.5, and 11.2.x before 11.2.2. There is Sensitive Data Disclosure in Sidekiq Log…CVE-2018-16049Gitlab · 2.1% likely

   CWE-532

5. An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure.CVE-2019-9223Gitlab · 2.0% likely

   CWE-209

6. An Information Exposure issue (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. EXIF geolocat…CVE-2019-10109Gitlab · 2.0% likely

   CWE-200

7. An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2…CVE-2019-5463Gitlab · 1.9% likely

   CWE-200

8. An information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to view private system notes from a GraphQL endpoint.CVE-2019-15576Gitlab · 1.9% likely

   CWE-200

9. An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. Information Disclosure can occur because the Prom…CVE-2018-14602Gitlab · 1.8% likely

   CWE-200

10. An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Path Disclosure. When an error is encou…CVE-2019-6792Gitlab · 1.6% likely

    CWE-209

11. An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control (issue 5 of 5).CVE-2019-9225Gitlab · 1.6% likely

    CWE-200

12. GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, permitting administrators with acc…CVE-2018-19583Gitlab · 1.6% likely

    CWE-532

13. An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF Geolocation data was not being removed from certain image uploads.CVE-2019-15740Gitlab · 1.6% likely

    CWE-200

14. An information disclosure issue was discovered GitLab versions < 12.1.2, < 12.0.4, and < 11.11.6 in the security dashboard which could result in disclosure of vulnerability feedba…CVE-2019-5470GitLab · 1.6% likely

    CWE-200

15. An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Under certain conditions, merge request IDs were being disclosed via email.CVE-2019-15738Gitlab · 1.5% likely

    CWE-200

16. An issue was discovered in GitLab Community and Enterprise Edition 11.2 through 12.2.1. Insufficient permission checks were being applied when displaying CI results, potentially e…CVE-2019-15727Gitlab · 1.5% likely

    CWE-200

17. An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition 11.7.x before 11.7.4. GitLab Releases were vulnerable to an authorization issue that al…CVE-2019-7353Gitlab · 1.5% likely

    CWE-200

18. An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Information Exposure Through an Error Mess…CVE-2018-18648Gitlab · 1.5% likely

    CWE-200

19. An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure (issue 3 of 5).CVE-2019-9175Gitlab · 1.5% likely

    CWE-200

20. Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2, >=13.5 to <13.5.5, and >=1…CVE-2020-26417GitLab · CVSS 5.3 · 1.4% likely

    CWE-200

21. An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE). When an issue was moved to a public project fr…CVE-2019-15583GitLab · 1.4% likely

    CWE-200

22. An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure (issue 5 of 5).CVE-2019-9179Gitlab · 1.3% likely

    CWE-200

23. An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. Gitaly has allows an infor…CVE-2019-11549Gitlab · 1.3% likely

    CWE-532

24. In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may allow access to the project which it was exported from.CVE-2021-39898GitLab · CVSS 3.7 · 1.3% likely

    CWE-200

25. Kubernetes cluster token disclosure in GitLab CE/EE 10.3 and later through 13.0.1 allows other group maintainers to view Kubernetes cluster tokenCVE-2020-13264GitLab · CVSS 5.3 · 1.3% likely

    CWE-200

26. An information disclosure vulnerability in GitLab CE/EE versions 12.0 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed non-project members to see the default branch name for…CVE-2021-39941GitLab · CVSS 3.7 · 1.2% likely

    CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.