CVE-2014-3743: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Marked module before 0.3.1 for Node.js allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 gfm codeblocks language or 2 javascript url's...

PT-2020-7656

Name of the Vulnerable Software and Affected Versions Marked module versions prior to 0.3.1 Description Multiple cross-site scripting XSS vulnerabilities in the Marked module allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 gfm codeblocks language or 2...

PT-2020-7609

Name of the Vulnerable Software and Affected Versions marked versions 0.3.0 and earlier Description The issue affects versions of the marked software, allowing for cross-site scripting attacks through GFM Codeblocks and JavaScript URLs, even when the sanitize option is set to true. Recommendation...

Design/Logic Flaw

An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure via the GFM markdown API...

CVE-2018-17975

An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure via the GFM markdown API...

CVE-2018-17975

An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure via the GFM markdown API...

CVE-2018-17975

CVE-2018-17975 affects GitLab Community Edition 11.x prior to 11.1.8, 11.2.x prior to 11.2.5, and 11.3.x prior to 11.3.2. The root issue is Information Exposure via the GitLab Flavored Markdown (GFM) API, which can disclose confidential data (e.g., issue titles and private snippet titles) due to ...

CVE-2018-17975

Removed by vendor...

CVE-2018-17975: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure via the GFM markdown API...

PT-2018-14309

Name of the Vulnerable Software and Affected Versions GitLab Community Edition versions 11.0.0 through 11.1.8 GitLab Community Edition versions 11.2.0 through 11.2.5 GitLab Community Edition versions 11.3.0 through 11.3.2 Description An issue was discovered that leads to Information Exposure via...

GitLab: GFM renderer leaks external issue tracker URL of private project

Vulnerability details The GFM renderer has the ability to cross-link issues between projects. When this project is private and the user doesn't have access, the link isn't made. This is good. However, when the private project has an external issue tracker set up, an attacker can extract the...

Multiple Content Injection Vulnerabilities

Overview Versions 0.3.0 and earlier of marked are affected by two cross-site scripting vulnerabilities, even when sanitize: true is set. The attack vectors for this vulnerability are GFM Codeblocks and JavaScript URLs. Recommendation Upgrade to version 0.3.1 or later. References GitHub Advisory...