![](/assets/img/cve_300x82_sin_bg.png)
CVE-2018-20496
https://notcve.org/view.php?id=CVE-2018-20496
An issue was discovered in GitLab Community and Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS. Se descubrió un problema en GitLab Community and Enterprise Edition versiones 11.2.x hasta 11.4.x anteriores a la versión 11.4.13, versiones 11.5.x anteriores a la versión 11.5.6 y versiones 11.6.x anteriores a la versión 11.6.1. Permite un ataque de tipo XSS. • https://about.gitlab.com/2018/12/31/security-release-gitlab-11-dot-6-dot-1-released https://gitlab.com/gitlab-org/gitlab-ce/issues/54427 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2018-20501
https://notcve.org/view.php?id=CVE-2018-20501
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control. Se descubrió un problema en GitLab Community and Enterprise Edition versiones anteriores a la versión 11.4.13, versiones 11.5.x anteriores a la versión 11.5.6 y versiones 11.6.x anteriores a la versión 11.6.1. Tiene un Control de Acceso Incorrecto. • https://about.gitlab.com/2018/12/31/security-release-gitlab-11-dot-6-dot-1-released https://gitlab.com/gitlab-org/gitlab-ce/issues/53543 • CWE-862: Missing Authorization •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2018-20490
https://notcve.org/view.php?id=CVE-2018-20490
An issue was discovered in GitLab Community and Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS. Se descubrió un problema en GitLab Community and Enterprise Edition 11.2.x hasta la versión 11.4.x anterior a la versión 11.4.13, 11.5.x anterior a la versión 11.5.6 y 11.6.x anterior a la versión 11.6.1. Permite un ataque de tipo XSS. • https://about.gitlab.com/2018/12/31/security-release-gitlab-11-dot-6-dot-1-released https://gitlab.com/gitlab-org/gitlab-ce/issues/54377 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2018-20488
https://notcve.org/view.php?id=CVE-2018-20488
An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows Information Exposure. Se descubrió un problema en GitLab Community and Enterprise Edition versiones anteriores a la versión 11.4.13, versiones 11.5.x anteriores a la versión 11.5.6 y versiones 11.6.x anteriores a la versión 11.6.1. Permite una Exposición de Información. • https://about.gitlab.com/2018/12/31/security-release-gitlab-11-dot-6-dot-1-released https://gitlab.com/gitlab-org/gitlab-ce/issues/53477 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2018-20499
https://notcve.org/view.php?id=CVE-2018-20499
An issue was discovered in GitLab Community and Enterprise Edition before 11.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows SSRF. Se descubrió un problema en GitLab Community and Enterprise Edition versiones anteriores a la versión 11.x anteriores a la versión 11.4.13, versiones 11.5.x anteriores a la versión 11.5.6 y versiones 11.6.x anteriores a la versión 11.6.1. Permite un ataque de tipo SSRF. • https://about.gitlab.com/2018/12/31/security-release-gitlab-11-dot-6-dot-1-released https://gitlab.com/gitlab-org/gitlab-ce/issues/55439 • CWE-918: Server-Side Request Forgery (SSRF) •