Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gitlab gitlab 8.9.0 vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv3
CVE-2016-9086
GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab. Added in GitLab 8.9, this feature allows a user to export and then re-import their projects as tape archive files (tar). All GitLab versions before 8.13.0 ...
Gitlab Gitlab 8.9.1Gitlab Gitlab 8.9.8Gitlab Gitlab 8.9.10Gitlab Gitlab 8.10.5Gitlab Gitlab 8.10.7Gitlab Gitlab 8.10.12Gitlab Gitlab 8.11.1Gitlab Gitlab 8.9.11Gitlab Gitlab 8.10.0Gitlab Gitlab 8.10.1Gitlab Gitlab 8.10.2Gitlab Gitlab 8.10.3Gitlab Gitlab 8.11.3Gitlab Gitlab 8.11.4Gitlab Gitlab 8.11.5Gitlab Gitlab 8.11.6Gitlab Gitlab 8.13.2Gitlab Gitlab 8.9.0Gitlab Gitlab 8.11.8Gitlab Gitlab 8.12.0Gitlab Gitlab 8.12.7Gitlab Gitlab 8.13.1
6.5
CVSSv3
CVE-2017-11437
GitLab Enterprise Edition (EE) prior to 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an authenticated user with the ability to create a project to use the mirroring feature to potentially read repositories belonging to other users.
Gitlab Gitlab 8.6.3Gitlab Gitlab 8.6.5Gitlab Gitlab 8.7.2Gitlab Gitlab 8.7.4Gitlab Gitlab 8.7.9Gitlab Gitlab 8.8.1Gitlab Gitlab 8.8.8Gitlab Gitlab 8.9.0Gitlab Gitlab 8.9.5Gitlab Gitlab 8.9.7Gitlab Gitlab 8.10.12Gitlab Gitlab 8.10.3Gitlab Gitlab 8.10.9Gitlab Gitlab 8.11.1Gitlab Gitlab 8.11.6Gitlab Gitlab 8.11.8Gitlab Gitlab 8.12.11Gitlab Gitlab 8.12.2Gitlab Gitlab 8.12.9Gitlab Gitlab 8.13.1Gitlab Gitlab 8.13.6Gitlab Gitlab 8.13.8
5.3
CVSSv3
CVE-2020-6832
An issue exists in GitLab Enterprise Edition (EE) 8.9.0 up to and including 12.6.1. Using the project import feature, it was possible for someone to obtain issues from private projects.
Gitlab Gitlab
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook