Team IT Security (TSEC) Nachrichtenportal Logo

🕵️ GitLab Community Edition/Enterprise Edition up to 13.3.8/13.4.4/13.5.1 LFS Upload CE/EE path traversal


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability was found in GitLab Community Edition and Enterprise Edition up to 13.3.8/13.4.4/13.5.1 (Bug Tracking Software). It has been declared as critical. Affected by this vulnerability is an unknown code block of the file CE/EE of the component LFS Upload. Upgrading to version 13.3.9, 13.4.5 or 13.5.2 eliminates this vulnerability. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ GitLab Community Edition/Enterprise Edition up to 13.3.8/13.4.4/13.5.1 LFS Upload CE/EE path traversal


📈 71.69 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-3035 | GitLab Community Edition/Enterprise Edition up to 17.0.5/17.1.3/17.2.1 LFS Token authorization


📈 52.02 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition up to 13.3.8/13.4.4/13.5.1 Package Upload path traversal


📈 50.91 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-2825 | GitLab Community Edition/Enterprise Edition 16.0.0 Public Project path traversal (Issue 412371)


📈 44 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition up to 12.9 Project path traversal


📈 44 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition 12.6.0 gitlab-shell denial of service


📈 40.88 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition up to 11.7.9/11.8.5/11.9.3 .gitlab-ci.yml refs denial of service


📈 40.88 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-0518 | GitLab Community Edition/Enterprise Edition Helm Chart unrestricted upload (ID 383082)


📈 38.15 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition up to 12.9.2 Artifact Upload Request information disclosure


📈 38.15 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition up to 12.9 Upload Parameter information disclosure


📈 38.15 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition up to 12.2.1 Image Upload Location information disclosure


📈 38.15 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-6595 | GitLab Community Edition/Enterprise Edition up to 16.11.5/17.0.3/17.1.1 uncontrolled search path (Issue 417975)


📈 37.88 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition up to 11.3 directory traversal


📈 37.36 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition up to 10.7.6/10.8.5/11.0.3 Project Import Code Execution directory traversal


📈 37.36 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition bis 10.7.6/10.8.5/11.0.3 Project Import Code Execution Directory Traversal


📈 37.36 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition up to 11.5.7/11.6.5/11.7.0 directory traversal


📈 37.36 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition up to 11.3.13/11.4.11/11.5.4 directory traversal


📈 37.36 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition up to 11.3.11/11.4.9/11.5.2 Templates API directory traversal


📈 37.36 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Enterprise Edition 12.8 NuGet path traversal


📈 32.36 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-23793 | OTRS Community Edition up to 7.0.49/2023.x/2024.3.2 File Upload path traversal


📈 31.31 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition up to 10.5.7/10.6.4/10.7.1 Persistent cross site scripting


📈 31.24 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-4557 | GitLab Community Edition/Enterprise Edition up to 16.11.4/17.0.2/17.1.0 Banzai Pipeline resource consumption (Issue 460517)


📈 31.24 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-18462 | GitLab Community Edition/Enterprise Edition up to 12.4 Permission privileges management


📈 31.24 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition up to 11.8.9 Access Control Comment privilege escalation


📈 31.24 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition up to 11.7.7/11.8.3/11.9.1 Permission privilege escalation


📈 31.24 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition up to 13.0.1 Kubernetes Cluster Token information disclosure


📈 31.24 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition up to 12.2.1 Markdown IP Address information disclosure


📈 31.24 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-3060 | GitLab Community Edition/Enterprise Edition Error Tracking injection (ID 36542)


📈 31.24 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition API cross-site request forgery


📈 31.24 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition up to 11.2.6/11.3.7/11.4.2 Error Message information disclosure


📈 31.24 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition 11.1.0/11.1.1 Markdown Slow Denial of Service


📈 31.24 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-18446 | GitLab Community Edition/Enterprise Edition up to 12.4 Permission permission assignment


📈 31.24 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-4007 | GitLab Community Edition/Enterprise Edition up to 15.7.7/15.8.3/15.9.1 cross site scripting (ID 382789)


📈 31.24 Punkte
🕵️ Sicherheitslücken

🕵️ GitLab Community Edition/Enterprise Edition prior 11.3.11/11.4.8/11.5.1 privilege escalation


📈 31.24 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-7554 | GitLab Community Edition/Enterprise Edition up to 17.0.5/17.1.3/17.2.1 API Request information disclosure


📈 31.24 Punkte
🕵️ Sicherheitslücken

matomo
•