Filtered by vendor Gitlab
Subscriptions
Filtered by product Gitlab
Subscriptions
Total
1055 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2020-13320 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 6.5 Medium |
| An issue has been discovered in GitLab before version 12.10.13 that allowed a project member with limited permissions to view the project security dashboard. | ||||
| CVE-2020-13324 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 6.5 Medium |
| A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the private activity of a user could be exposed via the API. | ||||
| CVE-2020-13309 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 5.4 Medium |
| A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was vulnerable to a blind SSRF attack through the repository mirroring feature. | ||||
| CVE-2020-13304 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 3.8 Low |
| A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Same 2 factor Authentication secret code was generated which resulted an attacker to maintain access under certain conditions. | ||||
| CVE-2020-13311 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 4.3 Medium |
| A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Wiki was vulnerable to a parser attack that prohibits anyone from accessing the Wiki functionality through the user interface. | ||||
| CVE-2020-13302 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 3.8 Low |
| A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Under certain conditions GitLab was not properly revoking user sessions and allowed a malicious user to access a user account with an old password. | ||||
| CVE-2020-13307 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 3.8 Low |
| A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not revoking current user sessions when 2 factor authentication was activated allowing a malicious user to maintain their access. | ||||
| CVE-2020-13299 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 8.1 High |
| A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The revocation feature was not revoking all session tokens and one could re-use it to obtain a valid session. | ||||
| CVE-2020-13300 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 8 High |
| GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth authorization scope change without user consent in the middle of the authorization flow. | ||||
| CVE-2020-13298 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 7.2 High |
| A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Conan package upload functionality was not properly validating the supplied parameters, which resulted in the limited files disclosure. | ||||
| CVE-2020-13286 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 6.4 Medium |
| For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery. | ||||
| CVE-2020-13287 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 4.3 Medium |
| A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Project reporters and above could see confidential EPIC attached to confidential issues | ||||
| CVE-2020-13281 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 6.5 Medium |
| For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature | ||||
| CVE-2020-13280 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 6.5 Medium |
| For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message. | ||||
| CVE-2020-13296 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 6.5 Medium |
| An issue has been discovered in GitLab affecting versions >=10.7 <13.0.14, >=13.1.0 <13.1.8, >=13.2.0 <13.2.6. Improper Access Control for Deploy Tokens | ||||
| CVE-2020-13261 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 5.3 Medium |
| Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other administrators to view Amazon EKS credentials via HTML source code | ||||
| CVE-2020-13288 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 5.5 Medium |
| In GitLab before 13.0.12, 13.1.6, and 13.2.3, a stored XSS vulnerability exists in the CI/CD Jobs page | ||||
| CVE-2020-13297 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 3.8 Low |
| A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. When 2 factor authentication was enabled for groups, a malicious user could bypass that restriction by sending a specific query to the API endpoint. | ||||
| CVE-2020-13290 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 7.5 High |
| In GitLab before 13.0.12, 13.1.6, and 13.2.3, improper access control was used on the Applications page | ||||
| CVE-2020-13291 | 1 Gitlab | 1 Gitlab | 2024-08-04 | 8.1 High |
| In GitLab before 13.2.3, project sharing could temporarily allow too permissive access. | ||||