GitLab EE

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

1. Certain SAST CiConfiguration information could be viewed by unauthorized users in GitLab EE starting with 13.3. This information was exposed through GraphQL to non-members of publ…CVE-2020-26406GitLab · CVSS 5.3 · 1.4% likely
2. An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE) and Enterprise Edition (EE) where private merge requests and issues would be…CVE-2019-15590GitLab · 1.1% likely

   CWE-284

3. An authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the merge request approval rules to be overridden without appropriate permissions.CVE-2019-5474GitLab · 1.1% likely

   CWE-284

4. Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics starting in GitLab EE 13.2 before 13.6.2.CVE-2020-26412GitLab · CVSS 3.1 · 1.0% likely
5. An IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that allowed a project owner or maintainer to see the members of…CVE-2019-15581GitLab · 1.0% likely

   CWE-639

6. An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptibl…CVE-2020-13349GitLab · CVSS 4.3 · 0.9% likely

   CWE-400

7. An IDOR was discovered in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that allowed a maintainer to add any private group to a p…CVE-2019-15582GitLab · 0.9% likely

   CWE-639

8. An issue has been discovered in GitLab EE affecting all versions starting from 10.2. Required CODEOWNERS approval could be bypassed by targeting a branch without the CODEOWNERS fi…CVE-2020-13348GitLab · CVSS 5.7 · 0.8% likely
9. Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on despite user cap being enabledCVE-2021-22240GitLab · CVSS 4.2 · 0.7% likely

   CWE-863

10. Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs. This affects versions >=8.4 to <13.4.7, >=13…CVE-2020-26416GitLab · CVSS 4 · 0.3% likely

    CWE-532

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.