GitLab CE/EE

Every one of the 31 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Gitlab CE/EE 13.4 - 13.6.2 - Information DisclosureCVE-2020-26413GitLab · CVSS 5.3 · 35% likely

   CWE-200

2. A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which could result in SSRF where the library is utilized.CVE-2019-5464GitLab · 2.8% likely

   CWE-201 bounty report

3. A command injection exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to inject commands via the API through the blobs scope.CVE-2019-15575Gitlab · 2.4% likely

   CWE-771 bounty report

4. An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2…CVE-2019-5463Gitlab · 1.9% likely

   CWE-2001 bounty report

5. An information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to view private system notes from a GraphQL endpoint.CVE-2019-15576Gitlab · 1.9% likely

   CWE-2001 bounty report

6. An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.8.9. A specially crafted request could bypass Multipart protection and read files in certain sp…CVE-2020-13356GitLab · CVSS 8.2 · 1.8% likely
7. An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14. A path traversal is found in LFS Upload that allows attacker to overwrite certain specific…CVE-2020-13355GitLab · CVSS 7.5 · 1.7% likely

   CWE-22

8. Improper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) in the GitLab SAML integration had a validation i…CVE-2019-15585GitLab · 1.6% likely

   CWE-287

9. A authentication bypass vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.10 in the Salesforce login integration that could be used by an attacker to create an a…CVE-2019-5486Gitlab · 1.5% likely

   CWE-2881 bounty report

10. Path traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8 allows an attacker to save packages in arbitrary locations. Affected versions are >…CVE-2020-26405GitLab · CVSS 7.1 · 1.5% likely

    CWE-22

11. Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2, >=13.5 to <13.5.5, and >=1…CVE-2020-26417GitLab · CVSS 5.3 · 1.4% likely

    CWE-200

12. A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 12.6. The container registry name check could cause exponential number of backtracks for certain…CVE-2020-13354GitLab · CVSS 4.3 · 1.4% likely

    CWE-400

13. An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE). When an issue was moved to a public project fr…CVE-2019-15583GitLab · 1.4% likely

    CWE-200

14. Insufficient permission checks in scheduled pipeline API in GitLab CE/EE 13.0+ allows an attacker to read variable names and values for scheduled pipelines on projects visible to…CVE-2020-13351GitLab · CVSS 6.5 · 1.4% likely

    CWE-2761 bounty report

15. A DOS vulnerability exists in Gitlab CE/EE >=10.3, <13.4.7,>=13.5, <13.5.5,>=13.6, <13.6.2 that allows an attacker to trigger uncontrolled resource by bypassing input validation i…CVE-2020-26409GitLab · CVSS 4.3 · 1.3% likely

    CWE-400

16. Private group info is leaked leaked in GitLab CE/EE version 10.2 and above, when the project is moved from private to public group. Affected versions are: >=10.2, <13.3.9,>=13.4,…CVE-2020-13352GitLab · CVSS 3.7 · 1.2% likely
17. A denial of service exists in gitlab <v12.3.2, <v12.2.6, and <v12.1.10 that would let an attacker bypass input validation in markdown fields take down the affected page.CVE-2019-15584Gitlab · 1.2% likely

    CWE-4001 bounty report

18. An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosure of the newly created issue ID.CVE-2019-5465GitLab · 1.1% likely

    CWE-200

19. An improper access control vulnerability exists in Gitlab <v12.3.2, <v12.2.6, <v12.1.12 which would allow a blocked user would be able to use GIT clone and pull if he had obtained…CVE-2019-15589Gitlab · 1.1% likely

    CWE-2841 bounty report

20. A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2 that allows an attacker to view limited inf…CVE-2020-26408GitLab · CVSS 5.3 · 1.0% likely

    CWE-862

21. An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) where the assignee(s) of a confidential issue i…CVE-2019-15579GitLab · 1.0% likely

    CWE-200

22. An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE). The path of a private project, that used to be…CVE-2019-15578GitLab · 1.0% likely

    CWE-200

23. An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to disclose label names.CVE-2019-5466Gitlab · 1.0% likely

    CWE-639

24. A XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6 before 13.6.2 that allows an attacker to perform cross-site scripting to other use…CVE-2020-26407GitLab · CVSS 5.5 · 0.8% likely

    CWE-79

25. CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able to target GitLab instance administrators to pause/resume runners. Affected version…CVE-2020-13350GitLab · CVSS 3.1 · 0.8% likely

    CWE-3521 bounty report

26. The Terraform API in GitLab CE/EE 12.10+ exposed the object storage signed URL on the delete operation allowing a malicious project maintainer to overwrite the Terraform state, by…CVE-2020-13359GitLab · CVSS 7.6 · 0.8% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.