|
196061
|
4.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
An information disclosure vulnerability in GitLab EE versions 13.10 and later allowed a user to read project details
|
CWE-862
Missing Authorization
|
CVE-2021-22233
|
2024-11-21 14:49 |
2021-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196062
|
5.4 |
MEDIUM
Network
|
gitlab
|
gitlab
|
Insufficient input sanitization in markdown in GitLab version 13.11 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted markdown
|
CWE-79
Cross-site Scripting
|
CVE-2021-22225
|
2024-11-21 14:49 |
2021-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196063
|
6.5 |
MEDIUM
Network
|
gitlab
|
gitlab
|
A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker to call mutations as the victim
|
CWE-352
Origin Validation Error
|
CVE-2021-22224
|
2024-11-21 14:49 |
2021-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196064
|
4.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
A denial of service in user's profile page is found starting with GitLab CE/EE 8.0 that allows attacker to reject access to their profile page via using a specially crafted username.
|
NVD-CWE-noinfo
|
CVE-2021-22231
|
2024-11-21 14:49 |
2021-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196065
|
7.2 |
HIGH
Network
|
gitlab
|
gitlab
|
Improper code rendering while rendering merge requests could be exploited to submit malicious code. This vulnerability affects GitLab CE/EE 9.3 and later through 13.11.6, 13.12.6, and 14.0.2.
|
NVD-CWE-noinfo
|
CVE-2021-22230
|
2024-11-21 14:49 |
2021-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196066
|
6.1 |
MEDIUM
Network
|
gitlab
|
gitlab
|
A reflected cross-site script vulnerability in GitLab before versions 13.11.6, 13.12.6 and 14.0.2 allowed an attacker to send a malicious link to a victim and trigger actions on their behalf if they …
|
CWE-79
Cross-site Scripting
|
CVE-2021-22227
|
2024-11-21 14:49 |
2021-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196067
|
6.5 |
MEDIUM
Network
|
gitlab
|
gitlab
|
An issue has been discovered in GitLab affecting all versions before 13.11.6, all versions starting from 13.12 before 13.12.6, and all versions starting from 14.0 before 14.0.2. Improper access contr…
|
NVD-CWE-Other
|
CVE-2021-22228
|
2024-11-21 14:49 |
2021-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196068
|
6.1 |
MEDIUM
Network
|
gitlab
|
gitlab
|
Client-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9 allows a specially crafted feature flag name to PUT requests on behalf of other users via clicking on a link
|
CWE-79
Cross-site Scripting
|
CVE-2021-22223
|
2024-11-21 14:49 |
2021-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196069
|
5.4 |
MEDIUM
Network
|
gitlab
|
gitlab
|
HTML injection was possible via the full name field before versions 13.11.6, 13.12.6, and 14.0.2 in GitLab CE
|
CWE-74
Injection
|
CVE-2021-22232
|
2024-11-21 14:49 |
2021-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196070
|
7.5 |
HIGH
Network
|
gitlab
|
gitlab
|
An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.8. Under a special condition it was possible to access data of an internal repository through project fork done by…
|
NVD-CWE-noinfo
|
CVE-2021-22229
|
2024-11-21 14:49 |
2021-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|