Gitlab Ce/Ee
Approved changes feed: RSS · Atom
cpe:2.3:a:gitlab:gitlab_ce/ee:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gitlab (57573e99-56e6-5fad-895e-0ce7fffc5b90) |
|---|---|
| Product | Gitlab Ce/Ee (ffdcd936-138c-53b0-a59b-66bcf8dab76f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-26417 |
vulnerable | 2026-06-08 05:23:51.211900 |
Details available
MEDIUM (5.3)
Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2, >=13.5 to <13.5.5, and >=13.1 to <13.4.7.
Published: 2020-12-11T03:37:36.000Z
Updated: 2024-08-04T15:56:04.584Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26413 |
vulnerable | 2026-06-08 05:23:51.209367 |
Details available
MEDIUM (5.3)
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13.6.2. Information disclosure via GraphQL results in user email being unexpectedly visible.
Published: 2020-12-11T03:47:34.000Z
Updated: 2024-08-04T15:56:04.703Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26409 |
vulnerable | 2026-06-08 05:23:51.205652 |
Details available
MEDIUM (4.3)
A DOS vulnerability exists in Gitlab CE/EE >=10.3, <13.4.7,>=13.5, <13.5.5,>=13.6, <13.6.2 that allows an attacker to trigger uncontrolled resource by bypassing input validation in markdown fields.
Published: 2020-12-11T01:17:28.000Z
Updated: 2024-08-04T15:56:04.626Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26408 |
vulnerable | 2026-06-08 05:23:51.205003 |
Details available
MEDIUM (5.3)
A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2 that allows an attacker to view limited information in user's private profile
Published: 2020-12-11T04:01:26.000Z
Updated: 2024-08-04T15:56:04.394Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26407 |
vulnerable | 2026-06-08 05:23:51.204553 |
Details available
MEDIUM (5.5)
A XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6 before 13.6.2 that allows an attacker to perform cross-site scripting to other users via importing a malicious project
Published: 2020-12-10T05:16:24.000Z
Updated: 2024-08-04T15:56:04.267Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26405 |
vulnerable | 2026-06-08 05:23:51.200920 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13359 |
vulnerable | 2026-06-08 05:18:00.515124 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13358 |
vulnerable | 2026-06-08 05:18:00.514526 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13357 |
vulnerable | 2026-06-08 05:18:00.514004 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13356 |
vulnerable | 2026-06-08 05:18:00.513467 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13355 |
vulnerable | 2026-06-08 05:18:00.513056 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13354 |
vulnerable | 2026-06-08 05:18:00.512609 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13352 |
vulnerable | 2026-06-08 05:18:00.509895 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13351 |
vulnerable | 2026-06-08 05:18:00.509332 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13350 |
vulnerable | 2026-06-08 05:18:00.508805 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5465 |
vulnerable | 2026-06-08 05:13:59.233120 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5464 |
vulnerable | 2026-06-08 05:13:59.232665 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15586 |
vulnerable | 2026-06-08 05:12:57.625209 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15585 |
vulnerable | 2026-06-08 05:12:57.624759 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15583 |
vulnerable | 2026-06-08 05:12:57.624054 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15579 |
vulnerable | 2026-06-08 05:12:57.620062 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15578 |
vulnerable | 2026-06-08 05:12:57.619591 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.