gitlab

1,383 tracked vulnerabilities.

CVE-2019-9223 HIGH
GitLab < 11.6.10, 11.7.x < 11.7.6, 11.8.x < 11.8.1 - Information Exposure via Error Message
Apr 17, 2019
CVSS 7.5
EPSS 0.00
CVE-2019-9222 HIGH
GitLab < 11.6.10, 11.7.x < 11.7.6, 11.8.x < 11.8.1 - Path Traversal
Apr 17, 2019
CVSS 8.1
EPSS 0.00
CVE-2019-9220 HIGH
GitLab < 11.6.10, 11.7.x < 11.7.6, 11.8.x < 11.8.1 - Uncontrolled Resource Consumption
Apr 17, 2019
CVSS 7.5
EPSS 0.00
CVE-2019-9219 LOW
GitLab < 11.6.10, 11.7.x < 11.7.6, 11.8.x < 11.8.1 - Authorization Bypass Through User-Controlled Key
Apr 17, 2019
CVSS 3.7
EPSS 0.00
CVE-2019-9217 CRITICAL
GitLab <11.6.10-11.8.1 - Info Disclosure
Apr 17, 2019
CVSS 9.8
EPSS 0.00
CVE-2019-9179 LOW
GitLab < 11.6.10, 11.7.x < 11.7.6, 11.8.x < 11.8.1 - Information Exposure
Apr 17, 2019
CVSS 3.7
EPSS 0.00
CVE-2019-9178 MEDIUM
GitLab <11.6.10-11.8.1 - Info Disclosure
Apr 17, 2019
CVSS 5.3
EPSS 0.00
CVE-2019-9176 MEDIUM
GitLab < 11.6.10, 11.7.x < 11.7.6, 11.8.x < 11.8.1 - Cross-Site Request Forgery
Apr 17, 2019
CVSS 6.5
EPSS 0.00
CVE-2019-9175 MEDIUM
GitLab < 11.6.10, 11.7.x < 11.7.6, 11.8.x < 11.8.1 - Information Exposure
Apr 17, 2019
CVSS 5.3
EPSS 0.00
CVE-2019-9174 CRITICAL
GitLab < 11.6.10, 11.7.x < 11.7.6, 11.8.x < 11.8.1 - Server-Side Request Forgery
Apr 17, 2019
CVSS 10.0
EPSS 0.00
CVE-2019-9172 MEDIUM
GitLab <11.6.10-11.8.1 - Info Disclosure
Apr 17, 2019
CVSS 5.9
EPSS 0.00
CVE-2019-9171 LOW
GitLab < 11.6.10, 11.7.x < 11.7.6, 11.8.x < 11.8.1 - Information Exposure
Apr 17, 2019
CVSS 3.7
EPSS 0.00
CVE-2019-9170 MEDIUM
GitLab < 11.6.10, 11.7.x < 11.7.6, 11.8.x < 11.8.1 - Incorrect Access Control
Apr 17, 2019
CVSS 5.3
EPSS 0.00
CVE-2019-7155 MEDIUM
GitLab <11.5.8-11.7.1 - Privilege Escalation
Apr 16, 2019
CVSS 6.5
EPSS 0.00
CVE-2019-6796 MEDIUM
GitLab < 11.5.8, 11.6.x < 11.6.6, 11.7.x < 11.7.1 - Stored Cross-Site Scripting in User Status Field
Apr 11, 2019
CVSS 6.1
EPSS 0.00
CVE-2019-6240 HIGH
GitLab < 11.4.0 - Path Traversal
Mar 25, 2019
CVSS 7.5
EPSS 0.00
CVE-2018-17537 MEDIUM
GitLab < 11.1.7, 11.2.x < 11.2.4, 11.3.x < 11.3.1 - Stored Cross-Site Scripting in Blog Viewer
Apr 16, 2023
CVSS 5.4
EPSS 0.00
CVE-2018-17536 MEDIUM
GitLab < 11.1.7, 11.2.x < 11.2.4, 11.3.x < 11.3.1 - Stored Cross-Site Scripting via Project Import
Apr 15, 2023
CVSS 5.4
EPSS 0.00
CVE-2018-17455 HIGH
GitLab EE <11.1.7, <11.2.4, <11.3.1 - Info Disclosure
Apr 15, 2023
CVSS 7.5
EPSS 0.00
CVE-2018-17454 MEDIUM
GitLab < 11.1.7, 11.2.x < 11.2.4, 11.3.x < 11.3.1 - Stored Cross-Site Scripting on Issue Details Screen
Apr 15, 2023
CVSS 5.4
EPSS 0.00
CVE-2018-17453 MEDIUM
GitLab <11.1.7-11.3.1 - Info Disclosure
Apr 15, 2023
CVSS 5.3
EPSS 0.00
CVE-2018-17452 CRITICAL
GitLab <11.1.7-11.2.4-11.3.1 - SSRF
Apr 15, 2023
CVSS 9.8
EPSS 0.00
CVE-2018-17451 HIGH
GitLab <11.1.7, <11.2.4, <11.3.1 - CSRF
Apr 15, 2023
CVSS 8.8
EPSS 0.00
CVE-2018-17450 MEDIUM
GitLab <11.1.7, <11.2.4, <11.3.1 - SSRF
Apr 15, 2023
CVSS 4.3
EPSS 0.00
CVE-2018-17449 HIGH
GitLab <11.1.7-11.3.1 - Info Disclosure
Apr 15, 2023
CVSS 7.5
EPSS 0.00
Products
gitlab 1,368 GitLab 110 gitlab-shell 5 dynamic_application_security_testing_analyzer 4 runner 3 gitlab-vscode-extension 2 GitLab AI Gateway 1 dast_api_scanner 1 gitaly 1 gitlab_runner 1 language_server 1 omnibus 1
Quick Filters
Critical CVEs With Exploits In CISA KEV