Snippet JS template allows attacker to read a user's private snippets Analysed #348443 Valid Information Disclosure Low 2019-03-03 $300 165 DoS attack via comment on Issue Analysed #557154 Valid Denial of Service Low 2019-11-21 $1,000 84 Subdomain takeover in Gitlab pages Analysed #2523654 Valid Misconfiguration and Insecure Design Low 2024-10-09 – 79 Remove obsolete domain from handbook subdomain Analysed #2599840 Valid Misconfiguration and Insecure Design Low 2024-10-01 – 72 HTML injection possible with soft email confirmations when Administrator manually confirms attacker email address Analysed #1935628 Valid Injection and Smuggling Low 2024-10-08 $1,060 61 [Admin Panel] CSRF to resume/pause runner Analysed #415238 Valid Cross-Site Request Forgery Low 2020-12-01 – 60 Know whether private project name exists or not within a group using link comments Analysed #495497 Valid Information Disclosure Low 2019-10-07 – 58 EXIF metadata not stripped from JPG group logos Analysed #446238 Valid Information Disclosure Low 2020-09-08 $500 55 All functions that allow users to specify color code are vulnerable to ReDoS Analysed #511381 Valid Denial of Service Low 2019-08-21 $1,000 53 Clientside resource Exhausting by exploiting gitlab math rendering Analysed #549040 Valid Denial of Service Low 2019-10-01 – 50 View the Starred Projects in a Private Profile Analysed #703894 Valid Insecure Direct Object Reference Low 2021-02-02 $500 49 Milestones leaked via search API Analysed #460815 Valid Access Control Low 2019-07-19 – 43 Privilege escalation due to insecure use of logrotate Analysed #578119 Valid Access Control Low 2019-10-01 – 32 Guest Users can create issues for Sentry errors and track their status Analysed #1117768 Valid Access Control Low 2021-09-24 $610 29 Access Projects And create projects in gitlab pre production server Analysed #540711 Valid Access Control Low 2019-08-28 – 28 Add and Access to Labels of any Private Projects/Groups of Gitlab(IDOR) Analysed #439729 Valid Insecure Direct Object Reference Low 2019-09-19 – 27 No redirect_uri in the db for web-internal clientKey leads to one-click DoS on gitter.im Analysed #702987 Valid Denial of Service Low 2020-05-15 – 26 A profile page of a user can be denied from loading by appending .html to the username Analysed #475098 Valid Misconfiguration and Insecure Design Low 2021-08-30 $200 26 Claiming package names in GitLab's automatic package referencer. Analysed #462503 Valid Input Validation and Logic Low 2019-04-05 $1,000 26 Domain Takeover - gl-canary.freetls.fastly.net Analysed #716677 Valid Access Control Low 2023-05-30 $200 25 Persistent XSS via e-mail when creating merge requests Analysed #496973 Valid Cross-site Scripting Low 2019-08-30 – 24 Last build status and coverage leaked to unauthorized users Analysed #477222 Valid Information Disclosure Low 2019-09-01 – 24 Possibilty to purchase Ultimate - 1 Year (EDU or OSS) Analysed #882848 Valid Input Validation and Logic Low 2020-11-02 – 23 Race condition in GitLab import, giving access to other people their imports due to filename collision Analysed #214028 Valid Information Disclosure Low 2017-10-03 – 22 Gitlab is vulnerable to impersonation attacks due to broken links Analysed #265696 Valid Misconfiguration and Insecure Design Low 2017-09-06 – 21 Instant open redirect on Live preview WEB Ide opening Analysed #437142 Valid Open Redirect Low 2020-11-04 $1,000 20 HTML TAG INJECTION ON PROFILE NAME Analysed #358001 Valid Cross-site Scripting Low 2018-07-27 – 19 Private System Note Disclosure using GraphQL Analysed #633001 Valid Information Disclosure Low 2019-12-13 – 17 [information disclosure] Validate existence of a private project. #605608 Valid Information Disclosure Low 2021-03-09 – 14 Guest users can change the confidentiality attribute on those issues that have been assigned to them #762271 Valid Access Control Low 2020-11-09 $100 13 Impersonation attack via Broken Link in Resellers Page #266908 Valid Misconfiguration and Insecure Design Low 2017-09-08 – 12 Head pipeline leaked to unauthorized users via blocking merge request feature #667408 Valid Access Control Low 2019-12-13 – 11 Last pipeline status for MR leaked #582349 Valid Authentication Low 2019-10-01 – 10 Path paths and file disclosure vulnerabilities at influxdb.quality.gitlab.net #1643962 Valid Information Disclosure Low 2022-11-04 – 8 Gitlab.com is vulnerable to reverse tabnabbing. #211065 Valid Open Redirect Low 2017-03-21 – 8 CSRF Token Bypass in Account Deletion #182487 Valid Cross-Site Request Forgery Low 2017-04-20 – 7 Project Milestones Disclosed Via Groups When the Victim disabled milestones access in project settings #636560 Valid Information Disclosure Low 2019-12-13 – 5