gitlab
1,383 tracked vulnerabilities.
CVE-2020-13320
MEDIUM
GitLab < 12.10.13 - Unauthorized Security Dashboard Access
Sep 30, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-13319
MEDIUM
GitLab <13.1.2-12.10.13 - Info Disclosure
Sep 30, 2020
CVSS 4.3
EPSS 0.00
CVE-2020-13296
MEDIUM
GitLab >=10.7 <13.0.14, >=13.1.0 <13.1.8, >=13.2.0 <13.2.6 - Info D...
Sep 30, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-13308
LOW
GitLab <13.1.10-13.3.4 - Info Disclosure
Sep 15, 2020
CVSS 2.7
EPSS 0.00
CVE-2020-13307
LOW
GitLab <13.1.10-13.3.4 - Privilege Escalation
Sep 15, 2020
CVSS 3.8
EPSS 0.00
CVE-2020-13303
HIGH
GitLab <13.1.10-13.3.4 - Info Disclosure
Sep 15, 2020
CVSS 7.1
EPSS 0.00
CVE-2020-13315
LOW
GitLab < 13.1.10 - Denial of Service via Profile Activity Page
Sep 14, 2020
CVSS 3.7
EPSS 0.00
CVE-2020-13310
MEDIUM
GitLab Runner < 13.1.3, 13.2.3, 13.3.1 - Denial of Service via Malformed Queries
Sep 14, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-13309
MEDIUM
GitLab <13.1.10-13.3.4 - Blind SSRF
Sep 14, 2020
CVSS 5.4
EPSS 0.00
CVE-2020-13306
LOW
GitLab < 13.1.10 - Denial of Service via Webhook Rate Limitation Bypass
Sep 14, 2020
CVSS 3.7
EPSS 0.00
CVE-2020-13305
LOW
GitLab <13.1.10-13.3.4 - Info Disclosure
Sep 14, 2020
CVSS 3.5
EPSS 0.00
CVE-2020-13304
LOW
GitLab <13.1.10-13.3.4 - Privilege Escalation
Sep 14, 2020
CVSS 3.8
EPSS 0.00
CVE-2020-13302
LOW
GitLab <13.1.10-13.3.4 - Privilege Escalation
Sep 14, 2020
CVSS 3.8
EPSS 0.00
CVE-2020-13301
MEDIUM
GitLab < 13.1.10 - Stored Cross-Site Scripting on Standalone Vulnerability Page
Sep 14, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-13298
HIGH
GitLab <13.1.10-13.3.4 - Info Disclosure
Sep 14, 2020
CVSS 7.2
EPSS 0.00
CVE-2020-13297
LOW
GitLab <13.1.10-13.3.4 - Auth Bypass
Sep 14, 2020
CVSS 3.8
EPSS 0.00
CVE-2020-13317
MEDIUM
GitLab <13.1.10-13.3.4 - Privilege Escalation
Sep 14, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-13314
LOW
GitLab < 13.1.10, 13.2.8, 13.3.4 - Cross-Site Scripting via Omniauth Error Messages
Sep 14, 2020
CVSS 3.7
EPSS 0.00
CVE-2020-13313
MEDIUM
GitLab <13.1.10-13.3.4 - Info Disclosure
Sep 14, 2020
CVSS 4.3
EPSS 0.00
CVE-2020-13312
MEDIUM
GitLab <13.1.10-13.3.4 - Auth Bypass
Sep 14, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-13311
MEDIUM
GitLab < 13.1.10, 13.2.8, 13.3.4 - Denial of Service in Wiki Parser
Sep 14, 2020
CVSS 4.3
EPSS 0.00
CVE-2020-13318
MEDIUM
GitLab < 13.0.12, 13.1.10, 13.2.8, 13.3.4 - Cross-Account Assume Role Attack via EKS Integration
Sep 14, 2020
CVSS 6.4
EPSS 0.00
CVE-2020-13316
MEDIUM
GitLab <13.1.10-13.3.4 - Info Disclosure
Sep 14, 2020
CVSS 5.4
EPSS 0.00
CVE-2020-13300
HIGH
GitLab CE/EE <13.3.4 - Info Disclosure
Sep 14, 2020
CVSS 8.0
EPSS 0.00
CVE-2020-13299
HIGH
GitLab <13.1.10-13.3.4 - Info Disclosure
Sep 14, 2020
CVSS 8.1
EPSS 0.00