Missing/Breach of Internal Security Boundary - Access to Job Queue Results in Remote Code Execution #224198 Informative Misconfiguration and Insecure Design – 2017-06-28 – – SSRF via git Repo by URL Abuse #191216 Duplicate Server-Side Request Forgery – 2017-11-28 – 3 Open redirect #214034 Valid Open Redirect – 2017-04-06 – 4 [Repository Import] Open Redirect via "continue[to]" parameter #215970 Valid Open Redirect – 2017-04-06 – 4 [Textile] XSS in project README files #205498 Valid Cross-site Scripting – 2017-02-15 – 5 Gitlab.com is vulnerable to reverse tabnabbing via AsciiDoc links. (#3) #213114 Valid Misconfiguration and Insecure Design – 2017-05-09 – 5 GFM renderer leaks external issue tracker URL of private project #133717 Valid Information Disclosure – 2017-06-08 – 6 CSRF-Token leak by request forgery #221432 Valid Cross-Site Request Forgery – 2017-10-09 – 6 CSRF Token Bypass in Account Deletion #182487 Valid Cross-Site Request Forgery – 2017-04-20 – 7 [reStructuredText] XSS in project README files #205497 Valid Cross-site Scripting – 2017-02-15 – 7 [RDoc] XSS in project README files #200693 Valid Cross-site Scripting – 2017-02-15 – 8 Gitlab.com is vulnerable to reverse tabnabbing. #211065 Valid Open Redirect – 2017-03-21 – 8 Gitlab.com is vulnerable to reverse tabnabbing. (#2) #212629 Valid Misconfiguration and Insecure Design – 2017-05-09 – 8 Markdown based stored XSS (IE only) #118024 Valid Cross-site Scripting – 2017-05-03 – 9 Users with guest access can post notes to private merge requests, issues, and snippets #195140 Valid Access Control – 2017-01-23 – 9 Users can download old project exports due to unclaimed namespace #195058 Valid Information Disclosure – 2017-01-23 – 10 [Subgroups] Unprivileged User Can Disclose Private Group Names #215384 Valid Insecure Direct Object Reference – 2017-03-30 – 11 Unfiltered `class` attribute in markdown code #216453 Valid Cross-site Scripting – 2017-04-13 – 11 Every user can delete public deploy keys #195088 Valid Access Control – 2017-01-23 – 12 Impersonation attack via Broken Link in Resellers Page #266908 Valid Misconfiguration and Insecure Design – 2017-09-08 – 12 User with guest access can access private merge requests #195134 Valid Access Control – 2017-01-23 – 13 Stored XSS on Files overview by abusing git submodule URL #218872 Valid Cross-site Scripting – 2017-05-09 – 17 SSRF vulnerability in gitlab.com via project import. #215105 Valid Server-Side Request Forgery – 2017-11-09 – 20 CSV injection in gitlab.com via issues export feature. #216243 Valid Command and Code Injection – 2017-07-21 – 20 all private tokens are leaked to an unauthenticated attacker #268794 Valid Access Control – 2017-09-21 – 20 [Markdown] Stored XSS via character encoding parser bypass #270999 Valid Cross-site Scripting – 2017-10-18 – 20 Gitlab is vulnerable to impersonation attacks due to broken links #265696 Valid Misconfiguration and Insecure Design – 2017-09-06 – 21 Race condition in GitLab import, giving access to other people their imports due to filename collision #214028 Valid Information Disclosure – 2017-10-03 – 22 Access to GitLab's Slack by abusing issue creation from e-mail #218230 Valid Authentication – 2017-09-21 – 54