| CVE-2019-18453 | MITTEL4.3 | An issue was discovered in GitLab Community and Enterprise Edition 11.6 through 12.4 in the add comments via email feature. It has Insecure Permissions. | 26/11/2019 |
| CVE-2019-18452 | MITTEL5.3 | An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4 when moving an issue to a public project from a private one. It has Insecure Permissions. | 26/11/2019 |
| CVE-2019-18451 | MITTEL6.1 | An issue was discovered in GitLab Community and Enterprise Edition 10.7.4 through 12.4 in the InternalRedirect filtering feature. It has an Open Redirect. | 26/11/2019 |
| CVE-2019-18450 | MITTEL4.3 | An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project labels feature. It has Insecure Permissions. | 26/11/2019 |
| CVE-2019-18449 | MITTEL4.3 | An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the autocomplete feature. It has Insecure Permissions (issue 2 of 2). | 26/11/2019 |
| CVE-2019-18448 | MITTEL6.5 | An issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Incorrect Access Control. | 26/11/2019 |
| CVE-2019-18447 | MITTEL4.3 | An issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Insecure Permissions. | 26/11/2019 |
| CVE-2019-18446 | MITTEL4.3 | An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.4. It has Insecure Permissions (issue 1 of 2). | 26/11/2019 |
| CVE-2019-18459 | MITTEL5.3 | An issue was discovered in GitLab Community and Enterprise Edition 11.3 to 12.3 in the protected environments feature. It has Insecure Permissions (issue 3 of 4). | 26/11/2019 |
| CVE-2019-18458 | NIEDRIG2.7 | An issue was discovered in GitLab Community and Enterprise Edition through 12.4. It has Insecure Permissions (issue 2 of 4). | 26/11/2019 |
| CVE-2019-18457 | HOCH8.8 | An issue was discovered in GitLab Community and Enterprise Edition 11.8 through 12.4 when handling Security tokens.. It has Insecure Permissions. | 26/11/2019 |
| CVE-2019-18463 | MITTEL4.3 | An issue was discovered in GitLab Community and Enterprise Edition through 12.4. It has Insecure Permissions (issue 4 of 4). | 26/11/2019 |
| CVE-2019-18462 | MITTEL4.3 | An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4. It has Insecure Permissions. | 26/11/2019 |
| CVE-2019-18461 | MITTEL4.3 | An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.3 when a sub group epic is added to a public group. It has Incorrect Access Control. | 26/11/2019 |
| CVE-2019-18460 | HOCH7.5 | An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.4 in the Comments Search feature provided by the Elasticsearch integration. It has Incorrect Access Control. | 26/11/2019 |
| CVE-2019-15593 | MITTEL6.5 | GitLab 12.2.3 contains a security vulnerability that allows a user to affect the availability of the service through a Denial of Service attack in Issue Comments. | 22/11/2019 |
| CVE-2019-15729 | HOCH7.5 | An issue was discovered in GitLab Community and Enterprise Edition 8.18 through 12.2.1. An internal endpoint unintentionally disclosed information about the last pipeline that ran for a merge request. | 17/09/2019 |
| CVE-2019-15741 | KRITISCH9.8 | An issue was discovered in GitLab Omnibus 7.4 through 12.2.1. An unsafe interaction with logrotate could result in a privilege escalation | 16/09/2019 |
| CVE-2019-15740 | MITTEL5.3 | An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF Geolocation data was not being removed from certain image uploads. | 16/09/2019 |
| CVE-2019-15739 | MITTEL6.1 | An issue was discovered in GitLab Community and Enterprise Edition 8.1 through 12.2.1. Certain areas displaying Markdown were not properly sanitizing some XSS payloads. | 16/09/2019 |