GitLab GitLab CE/EE vulnerabilities

Newest CVEs

• CVE-2020-26408

  A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2 that allows an attacker…

  GitLab · GitLab CE/EE

  Medium5.3
• CVE-2020-13357

  An issue was discovered in Gitlab CE/EE versions >= 13.1 to <13.4.7, >= 13.5 to <13.5.5, and >= 13.6 to <13.6.2 allowed an unauthorized user to access the user…

  GitLab · GitLab CE/EE

  Medium4.3
• CVE-2020-26413

  An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13.6.2. Information disclosure via GraphQL results in user email…

  GitLab · GitLab CE/EE

  Medium5.3
• CVE-2020-26417

  Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2, >=13.5…

  GitLab · GitLab CE/EE

  Medium5.3
• CVE-2020-26409

  A DOS vulnerability exists in Gitlab CE/EE >=10.3, <13.4.7,>=13.5, <13.5.5,>=13.6, <13.6.2 that allows an attacker to trigger uncontrolled resource by…

  GitLab · GitLab CE/EE

  Medium4.3
• CVE-2020-26407

  A XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6 before 13.6.2 that allows an attacker to perform cross-site…

  GitLab · Gitlab CE/EE

  Medium5.5
• CVE-2020-13359

  The Terraform API in GitLab CE/EE 12.10+ exposed the object storage signed URL on the delete operation allowing a malicious project maintainer to overwrite the…

  GitLab · GitLab CE/EE

  High7.6
• CVE-2020-13356

  An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.8.9. A specially crafted request could bypass Multipart protection and read…

  GitLab · GitLab CE/EE

  High8.2
• CVE-2020-13355

  An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14. A path traversal is found in LFS Upload that allows attacker to…

  GitLab · GitLab CE/EE

  High7.5
• CVE-2020-26405

  Path traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8 allows an attacker to save packages in arbitrary locations.…

  GitLab · GitLab CE/EE

  High7.1