Approved changes feed: RSS · Atom
cpe:2.3:a:gitlab:gitlab_ee:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gitlab (57573e99-56e6-5fad-895e-0ce7fffc5b90) |
|---|---|
| Product | Gitlab Ee (799820b6-b1a0-5004-a67c-7506299e9c13) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-22240 |
vulnerable | 2026-06-08 05:30:00.040311 |
Details available
MEDIUM (4.2)
Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on despite user cap being enabled
Published: 2021-08-05T19:25:09.000Z
Updated: 2024-08-03T18:37:18.341Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26416 |
vulnerable | 2026-06-08 05:23:51.211332 |
Details available
MEDIUM (4)
Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs. This affects versions >=8.4 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2.
Published: 2020-12-11T03:34:03.000Z
Updated: 2024-08-04T15:56:04.341Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26412 |
vulnerable | 2026-06-08 05:23:51.208888 |
Details available
LOW (3.1)
Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics starting in GitLab EE 13.2 before 13.6.2.
Published: 2020-12-11T03:51:02.000Z
Updated: 2024-08-04T15:56:04.357Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26406 |
vulnerable | 2026-06-08 05:23:51.203932 |
Details available
MEDIUM (5.3)
Certain SAST CiConfiguration information could be viewed by unauthorized users in GitLab EE starting with 13.3. This information was exposed through GraphQL to non-members of public projects with repository visibility restricted as well as guest members on private projects. Affected versions are: >=13.3, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.
Published: 2020-11-17T00:13:19.000Z
Updated: 2024-08-04T15:56:04.397Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13349 |
vulnerable | 2026-06-08 05:18:00.507324 |
Details available
MEDIUM (4.3)
An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic backtracking. Affected versions are >=8.12, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.
Published: 2020-11-17T18:22:32.000Z
Updated: 2024-08-04T12:18:17.565Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13348 |
vulnerable | 2026-06-08 05:18:00.506851 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5474 |
vulnerable | 2026-06-08 05:13:59.244533 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15590 |
vulnerable | 2026-06-08 05:12:57.638262 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15582 |
vulnerable | 2026-06-08 05:12:57.623539 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15581 |
vulnerable | 2026-06-08 05:12:57.623074 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.