gitlab
1,383 tracked vulnerabilities.
CVE-2017-0921
HIGH
GitLab <10.1.6-10.3.4 - Info Disclosure
Jul 03, 2018
CVSS 8.1
EPSS 0.00
CVE-2017-0919
HIGH
GitLab <10.1.6-10.3.4 - Auth Bypass
Jul 03, 2018
CVSS 7.5
EPSS 0.00
CVE-2017-0920
MEDIUM
GitLab <10.1.6, 10.2.6, 10.3.4 - Auth Bypass
Mar 22, 2018
CVSS 4.3
EPSS 0.00
CVE-2017-0927
MEDIUM
GitLab 8.16.0-9.5.9 - Unauthenticated Improper Authorization in Deployment Keys
Mar 21, 2018
CVSS 6.5
EPSS 0.00
CVE-2017-0926
HIGH
GitLab 8.8.0-9.5.9 - Unauthenticated Unauthorized User Login via OAuth Sign-In
Mar 21, 2018
CVSS 8.8
EPSS 0.00
CVE-2017-0925
HIGH
Gitlab EE <10.1.0 - Info Disclosure
Mar 21, 2018
CVSS 7.2
EPSS 0.00
CVE-2017-0924
MEDIUM
GitLab 10.2.4 - Stored Cross-Site Scripting in Labels Component
Mar 21, 2018
CVSS 6.1
EPSS 0.00
CVE-2017-0923
MEDIUM
GitLab 9.1 - Stored Cross-Site Scripting in IPython Notebooks
Mar 21, 2018
CVSS 6.1
EPSS 0.00
CVE-2017-0922
HIGH
GitLab 9.1.0-9.5.10 - Authorization Bypass in Projects::BoardsController
Mar 21, 2018
CVSS 7.5
EPSS 0.00
CVE-2017-0918
HIGH
Gitlab CE <10.3 - Path Traversal, RCE
Mar 21, 2018
CVSS 8.8
EPSS 0.06
CVE-2017-0917
MEDIUM
GitLab 10.1.0-10.1.5 - Stored Cross-Site Scripting in CI Job Component
Mar 21, 2018
CVSS 6.1
EPSS 0.00
CVE-2017-0916
CRITICAL
GitLab 8.8.0-10.1.5 - Remote Code Execution via Web Hook Input Validation Bypass
Mar 21, 2018
CVSS 9.8
EPSS 0.00
CVE-2017-0915
CRITICAL
GitLab 8.9.0-9.5.9 - Remote Code Execution via GitlabProjectsImportService Input Validation
Mar 21, 2018
CVSS 9.8
EPSS 0.01
CVE-2017-0914
HIGH
GitLab 10.1, 10.2, 10.2.4 - SQL Injection in MilestoneFinder
Mar 21, 2018
CVSS 7.5
EPSS 0.00
CVE-2017-17716
MEDIUM
GitLab 9.4.x - Improper Certificate Validation in LDAP SSL Verification
Dec 17, 2017
CVSS 5.9
EPSS 0.00
CVE-2017-12426
HIGH
GitLab CE/EE <8.17.8, <9.0.13, <9.1.10, <9.2.10, <9.3.10, <9.4.4 - RCE
Aug 14, 2017
CVSS 8.8
EPSS 0.01
CVE-2017-11438
MEDIUM
GitLab CE and EE < 9.0.11, 9.1.8, 9.2.8 - Authenticated Privilege Escalation via Group Creation
Aug 02, 2017
CVSS 6.3
EPSS 0.00
CVE-2017-11437
MEDIUM
GitLab EE < 8.17.7, 9.0.11, 9.1.8, 9.2.8, 9.3.8 - Authenticated Repository Access via Mirroring Feature
Aug 02, 2017
CVSS 6.5
EPSS 0.00
CVE-2017-8778
MEDIUM
GitLab < 8.14.9, 8.15.x < 8.15.6, 8.16.x < 8.16.5 - Stored Cross-Site Scripting via SVG Attachment or Avatar
May 04, 2017
CVSS 6.1
EPSS 0.00
CVE-2017-0882
MEDIUM
GitLab <8.15.8-8.17.4 - Info Disclosure
Mar 28, 2017
CVSS 6.3
EPSS 0.00
CVE-2016-9469
HIGH
GitLab 8.12.0-8.14.2 - Authenticated Issue and Merge Request Deletion
Mar 28, 2017
CVSS 8.2
EPSS 0.00
CVE-2016-4340
HIGH
GitLab 8.2.0-8.6.7 Authenticated Privilege Escalation via Impersonate
Jan 23, 2017
CVSS 8.8
EPSS 0.02
CVE-2016-9086
MEDIUM
GitLab 8.9.0-8.13.2 - Authenticated Sensitive Information Exposure via Project Import/Export
Nov 03, 2016
CVSS 6.5
EPSS 0.13
CVE-2014-8540
MEDIUM
GitLab 6.0.0-6.9.2 and 7.x < 7.4.3 - Authenticated Arbitrary Group Ownership Modification via Groups API
Jan 05, 2018
CVSS 6.5
EPSS 0.00
CVE-2014-3456
GitLab Enterprise Edition 6.6.0 - Cross-Site Scripting
May 13, 2014
EPSS 0.00