Browse / GitLab

GitLab

See its reports on the map

Attack surface: 785 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to GitLab

• Cross-site Scripting57
• Access Control53
• Information Disclosure32
• Code Execution18
• Server-Side Request Forgery18
• Misconfiguration16

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Blind SSRF in FogBugz project importDuplicateServer-Side Request Forgery (SSRF) · medium
   14 votes
2. Inadequate cache control in gitter allows to view private chat roomDuplicateImproper Authentication - Generic
   13 votes
3. GraphQL Query leads to sensitive information disclosureDuplicatePrivacy Violation · medium
   12 votes
4. Potensial SSRF via Git repository URL DuplicateServer-Side Request Forgery (SSRF) · medium
   7 votes
5. SSRF via git Repo by URL AbuseDuplicateServer-Side Request Forgery (SSRF) · medium
   3 votes