Page 19 of 404 results (0.033 seconds)

CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2020-13334

https://notcve.org/view.php?id=CVE-2020-13334

07 Oct 2020 — In GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, improper authorization checks allow a non-member of a project/group to change the confidentiality attribute of issue via mutation GraphQL query En GitLab versiones anteriores a 13.2.10, 13.3.7 y 13.4.2, unas comprobaciones inapropiadas de autorización permiten a un no miembro de un proyecto y de un grupo cambiar el atributo de confidencialidad del problema por medio de una consulta GraphQL de mutación • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13334.json • CWE-863: Incorrect Authorization •

CVSS: 4.3EPSS: 0%CPEs: 6EXPL: 0

CVE-2020-13335

https://notcve.org/view.php?id=CVE-2020-13335

07 Oct 2020 — Improper group membership validation when deleting a user account in GitLab >=7.12 allows a user to delete own account without deleting/transferring their group. Una comprobación inapropiada de la membresía de un grupo al eliminar una cuenta de usuario en GitLab versiones posteriores e incluyendo a 7.12, permite a un usuario eliminar su propia cuenta sin eliminar y transferir su grupo • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13335.json • CWE-863: Incorrect Authorization •

CVSS: 5.4EPSS: 0%CPEs: 6EXPL: 1

CVE-2020-13338

https://notcve.org/view.php?id=CVE-2020-13338

02 Oct 2020 — An issue has been discovered in GitLab affecting versions prior to 12.10.13, 13.0.8, 13.1.2. A stored cross-site scripting vulnerability was discovered when editing references. Se ha detectado un problema en GitLab que afecta a versiones anteriores a 12.10.13, 13.0.8, 13.1.2. Se detectó una vulnerabilidad de tipo cross-site scripting almacenado cuando se editan referencias • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13338.json • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.3EPSS: 0%CPEs: 3EXPL: 1

CVE-2020-13321

https://notcve.org/view.php?id=CVE-2020-13321

29 Sep 2020 — A vulnerability was discovered in GitLab versions prior to 13.1. Username format restrictions could be bypassed allowing for html tags to be added. Se detectó una vulnerabilidad en GitLab versiones anteriores a 13.1. Unas restricciones de formato de nombre de usuario pueden omitidas, permitiendo agregar etiquetas html • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13321.json •

CVSS: 7.7EPSS: 0%CPEs: 3EXPL: 0

CVE-2020-13323

https://notcve.org/view.php?id=CVE-2020-13323

29 Sep 2020 — A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos Se detectó una vulnerabilidad en GitLab versiones anteriores a 13.1. Bajo determinadas condiciones, las peticiones de fusión privadas pueden ser leídas mediante Todos • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13323.json •

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2020-13331

https://notcve.org/view.php?id=CVE-2020-13331

29 Sep 2020 — An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS by in the Wiki pasges. Se ha detectado un problema en GitLab que afecta a versiones anteriores a 12.10.13. GitLab era vulnerable a un ataque de tipo XSS almacenado mediante los pasajes de Wiki • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13331.json • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 1

CVE-2020-13330

https://notcve.org/view.php?id=CVE-2020-13330

29 Sep 2020 — An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS in import the Bitbucket project feature. Se ha detectado un problema en GitLab que afecta a versiones anteriores a 12.10.13. GitLab era vulnerable a un ataque de tipo XSS almacenado al importar la funcionalidad de proyecto Bitbucket • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13330.json • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 1

CVE-2020-13329

https://notcve.org/view.php?id=CVE-2020-13329

29 Sep 2020 — An issue has been discovered in GitLab affecting versions from 12.6.2 prior to 12.10.13. GitLab was vulnerable to a stored XSS by in the blob view feature. Se ha detectado un problema en GitLab que afecta a versiones de 12.6.2 anteriores a 12.10.13. GitLab era vulnerable a un ataque de tipo XSS almacenado en la funcionalidad blob view • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13329.json • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2020-13320

https://notcve.org/view.php?id=CVE-2020-13320

29 Sep 2020 — An issue has been discovered in GitLab before version 12.10.13 that allowed a project member with limited permissions to view the project security dashboard. Se detectó un problema en GitLab versiones anteriores a 12.10.13, que permitía a un miembro del proyecto con permisos limitados visualizar el panel de seguridad del proyecto • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13320.json •

CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 1

CVE-2020-13319

https://notcve.org/view.php?id=CVE-2020-13319

29 Sep 2020 — An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Missing permission check for adding time spent on an issue. Se ha detectado un problema en GitLab que afecta a versiones anteriores a 13.1.2, 13.0.8 y 12.10.13. Una falta de comprobación de permisos para agregar tiempo dedicado a un problema • https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13319.json • CWE-862: Missing Authorization •