Product by GitLab
Gitlab Ce/ee
31 known vulnerabilities in Gitlab Ce/ee (GitLab), 0 of them actively exploited (CISA KEV).
Key figures
31
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2019-5464 | GitLab CE/EE: Improper Input Validation | 9.8 | |
| Medium | CVE-2020-26413 | GitLab CE/EE: Information Disclosure | 5.3 | |
| Critical | CVE-2019-15585 | Gitlab CE/EE: Improper Authentication | 9.8 | |
| High | CVE-2019-15575 | GitLab CE/EE: Command Injection | 7.5 | |
| High | CVE-2020-13356 | GitLab CE/EE: security vulnerability | 8.2 | |
| High | CVE-2019-5486 | GitLab CE/EE: Authentication Bypass Using an Alternate Path or Channel | 8.8 | |
| High | CVE-2019-15576 | GitLab CE/EE: Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| High | CVE-2020-13355 | GitLab CE/EE: Path Traversal | 7.5 | |
| High | CVE-2019-15583 | GitLab CE/EE: Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| High | CVE-2020-26405 | GitLab CE/EE: Path Traversal | 7.1 | |
| Medium | CVE-2019-5463 | GitLab CE/EE: Exposure of Sensitive Information to an Unauthorized Actor | 5.3 | |
| High | CVE-2019-15589 | GitLab CE/EE: Improper Access Control | 8.8 | |
| Medium | CVE-2020-13351 | GitLab CE/EE: security vulnerability | 6.5 | |
| Medium | CVE-2019-15584 | GitLab CE/EE: Uncontrolled Resource Consumption | 6.5 | |
| Medium | CVE-2020-26417 | GitLab CE/EE: Information Disclosure | 5.3 | |
| Medium | CVE-2020-13354 | GitLab CE/EE: security vulnerability | 4.3 | |
| High | CVE-2020-13359 | GitLab CE/EE: security vulnerability | 7.6 | |
| Medium | CVE-2020-26409 | GitLab CE/EE: security vulnerability | 4.3 | |
| Medium | CVE-2019-15579 | GitLab CE/EE: Exposure of Sensitive Information to an Unauthorized Actor | 5.3 | |
| Medium | CVE-2020-26408 | GitLab CE/EE: Information Disclosure | 5.3 | |
| Medium | CVE-2019-15578 | GitLab CE/EE: Exposure of Sensitive Information to an Unauthorized Actor | 5.3 | |
| Medium | CVE-2019-5465 | GitLab CE/EE: Exposure of Sensitive Information to an Unauthorized Actor | 4.3 | |
| Medium | CVE-2020-13352 | GitLab CE/EE: security vulnerability | 3.7 | |
| Medium | CVE-2019-15586 | Gitlab CE/EE: Cross-site Scripting | 6.1 | |
| Medium | CVE-2020-26407 | Gitlab CE/EE: Cross-Site Scripting (XSS) | 5.5 |