CVSS: 6.5EPSS: 0%CPEs: 46EXPL: 0CVE-2016-9086
https://notcve.org/view.php?id=CVE-2016-9086
GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab. Added in GitLab 8.9, this feature allows a user to export and then re-import their projects as tape archive files (tar). All GitLab versions prior to 8.13.0 restricted this feature to administrators only. Starting with version 8.13.0 this feature was made available to all users. This feature did not properly check for symbolic links in user-provided archives and therefore it was possible for an authenticated user to retrieve the contents of any file accessible to the GitLab service account. • http://www.securityfocus.com/bid/94136 https://about.gitlab.com/2016/11/02/cve-2016-9086-patches • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 8.8EPSS: 2%CPEs: 45EXPL: 2CVE-2016-4340 – GitLab - 'impersonate' Feature Privilege Escalation
https://notcve.org/view.php?id=CVE-2016-4340
The impersonate feature in Gitlab 8.7.0, 8.6.0 through 8.6.7, 8.5.0 through 8.5.11, 8.4.0 through 8.4.9, 8.3.0 through 8.3.8, and 8.2.0 through 8.2.4 allows remote authenticated users to "log in" as any other user via unspecified vectors. La característica de suplantación en Gitlab 8.7.0, 8.6.0 hasta la versión 8.6.7, 8.5.0 hasta la versión 8.5.11, 8.4.0 hasta la versión 8.4.9, 8.3.0 hasta la versión 8.3.8 y 8.2.0 hasta la versión 8.2.4 permite a usuarios remotos autenticados para "iniciar sesión" como cualquier otro usuario a través de vectores no especificados. GitLab suffers from a privilege escalation vulnerability via the impersonate feature. Versions 8.2.0 through 8.2.4, 8.3.0 through 8.3.8, 8.4.0 through 8.4.9, 8.5.0 through 8.5.11, 8.6.0 through 8.6.7, and 8.7.0 are affected. • https://www.exploit-db.com/exploits/40236 http://packetstormsecurity.com/files/138368/GitLab-Impersonate-Privilege-Escalation.html https://about.gitlab.com/2016/05/02/cve-2016-4340-patches https://gitlab.com/gitlab-org/gitlab-ce/issues/15548 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.5EPSS: 0%CPEs: 8EXPL: 0CVE-2013-4489
https://notcve.org/view.php?id=CVE-2013-4489
The Grit gem for Ruby, as used in GitLab 5.2 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands, as demonstrated by the search box for the GitLab code search feature. La gema Grit para Ruby, utilizado en GitLab 5.2 anterior a 5.4.1 y 6.x anterior a 6.2.3, permite a usuarios remotos autenticados ejecutar comandos arbitrarios, tal y como fue demostrado por el cuadro de búsqueda para la funcionalidad de búsqueda de código de GitLab. • https://www.gitlab.com/2013/11/04/gitlab-ce-6-2-and-5-4-security-release •
CVSS: 6.5EPSS: 0%CPEs: 24EXPL: 0CVE-2013-4546
https://notcve.org/view.php?id=CVE-2013-4546
The repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote authenticated users to execute arbitrary commands via the import URL. La funcionalidad de importación de repositorios en gitlab-shell anterior a 1.7.4, utilizado en GitLab, permite a usuarios remotos autenticados ejecutar comandos arbitrarios a través de la URL de importación. • http://www.openwall.com/lists/oss-security/2013/11/11/2 https://gitlab.com/gitlab-org/gitlab-shell/blob/master/CHANGELOG https://www.gitlab.com/2013/11/08/security-vulnerability-in-gitlab-shell •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2014-3456
https://notcve.org/view.php?id=CVE-2014-3456
Cross-site scripting (XSS) vulnerability in GitLab Enterprise Edition (EE) 6.6.0 before 6.6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en GitLab Enterprise Edition (EE) 6.6.0 anterior a 6.6.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados. • https://www.gitlab.com/2014/02/27/gitlab-ee-6-6-2-security-release • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •