CVSS: 5.3EPSS: 0%CPEs: 6EXPL: 0CVE-2019-15740
https://notcve.org/view.php?id=CVE-2019-15740
An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF Geolocation data was not being removed from certain image uploads. Se detectó un problema en GitLab Community and Enterprise Edition versiones 7.9 hasta 12.2.1. Los datos de geolocalización de EXIF no estaban siendo eliminados desde ciertas cargas de imágenes. • https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released https://gitlab.com/gitlab-org/gitlab-ce/issues/61390 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.1EPSS: 0%CPEs: 6EXPL: 0CVE-2019-15739
https://notcve.org/view.php?id=CVE-2019-15739
An issue was discovered in GitLab Community and Enterprise Edition 8.1 through 12.2.1. Certain areas displaying Markdown were not properly sanitizing some XSS payloads. Se detectó un problema en GitLab Community and Enterprise Edition versiones 8.1 hasta 12.2.1. En ciertas áreas que muestran Markdown no fueron saneadas apropiadamente algunas cargas útiles de XSS. • https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released https://gitlab.com/gitlab-org/gitlab-ce/issues/64033 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0CVE-2019-15737
https://notcve.org/view.php?id=CVE-2019-15737
An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Certain account actions needed improved authentication and session management. Se detectó un problema en GitLab Community and Enterprise Edition versiones hasta 12.2.1. Determinadas acciones de la cuenta necesitaban autenticación mejorada y administración de sesión. • https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released https://gitlab.com/gitlab-org/gitlab-ce/issues/42733 •
CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0CVE-2019-15736
https://notcve.org/view.php?id=CVE-2019-15736
An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Under certain circumstances, CI pipelines could potentially be used in a denial of service attack. Se detectó un problema en GitLab Community and Enterprise Edition versiones hasta 12.2.1. Bajo ciertas circunstancias, las pipelines de CI podrían ser usadas potencialmente en un ataque de denegación de servicio. • https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released https://gitlab.com/gitlab-org/gitlab-ce/issues/51401 • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 4.3EPSS: 0%CPEs: 6EXPL: 0CVE-2019-15734
https://notcve.org/view.php?id=CVE-2019-15734
An issue was discovered in GitLab Community and Enterprise Edition 8.6 through 12.2.1. Under very specific conditions, commit titles and team member comments could become viewable to users who did not have permission to access these. Se descubrió un problema en GitLab Community and Enterprise Edition versiones 8.6 hasta 12.2.1. Bajo condiciones muy específicas, los títulos de commit y los comentarios de los miembros del equipo podrían ser visualizables para usuarios que no tenían permiso para acceder a ellos. • https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released https://gitlab.com/gitlab-org/gitlab-ce/issues/64711 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •