Lucene search
+L

6 matches found

OSV
OSV
•added 2023/04/15 11:15 p.m.•35 views

CVE-2018-17453

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Attackers may have been able to obtain sensitive access-token data from Sentry logs via the GRPC::Unknown exception...

5.3CVSS5.3AI score
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2023/04/15 11:15 p.m.•34 views

CVE-2018-17453

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Attackers may have been able to obtain sensitive access-token data from Sentry logs via the GRPC::Unknown exception...

5.3CVSS6.1AI score0.00518EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/04/15 12:00 a.m.•2 views

PT-2023-10700

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 11.1.0 through 11.1.7 GitLab Community and Enterprise Edition versions 11.2.0 through 11.2.4 GitLab Community and Enterprise Edition versions 11.3.0 through 11.3.1 Description An issue allows...

5.3CVSS0.00518EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/15 12:00 a.m.•3 views

CVE-2018-17453: Undefined Security Weakness

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Attackers may have been able to obtain sensitive access-token data from Sentry logs via the GRPC::Unknown exception...

5.3CVSS5.8AI score0.00518EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2023/04/15 12:00 a.m.•69 views

CVE-2018-17453

Removed by vendor...

5.3CVSS6AI score0.00518EPSS
SaveExploits0
FreeBSD
FreeBSD
•added 2018/10/01 12:00 a.m.•561 views

Gitlab -- multiple vulnerabilities

Gitlab reports: SSRF GCP access token disclosure Persistent XSS on issue details Diff formatter DoS in Sidekiq jobs Confidential information disclosure in events API endpoint validatelocalhost function in urlblocker.rb could be bypassed Slack integration CSRF Oauth2 GRPC::Unknown logging token...

9.8CVSS2.1AI score0.00839EPSS
SaveExploits0References1
Rows per page
Query Builder