vulnerability

FreeBSD: VID-a003b74f-d7b3-11ea-9df1-001b217b3468 (CVE-2020-14001): Gitlab -- Multiple Vulnerabilities

Severity
7
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Aug 6, 2020
Added
Aug 6, 2020
Modified
Dec 10, 2025

Description

Gitlab reports: Arbitrary File Read when Moving an Issue Memory Exhaustion via Excessive Logging of Invite Email Error Denial of Service Through Project Import Feature User Controlled Git Configuration Settings Resulting in SSRF Stored XSS in Issue Reference Number Tooltip Stored XSS in Issues List via Milestone Title Improper Access Control After Group Transfer Bypass Email Verification Required for OAuth Flow Confusion When Using Hexadecimal Branch Names Insufficient OAuth Revocation Improper Access Control for Project Sharing Stored XSS in Jobs Page Improper Access Control of Applications Page SSRF into Shared Runner Update Kramdown Gem

Solutions

freebsd-upgrade-package-gitlab-cefreebsd-upgrade-package-rubygem-kramdown
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.