Lucene search
K

61 matches found

BDU FSTEC
BDU FSTEC
added 2025/01/20 12:0 a.m.8 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the manipulation of inter-site requests, allows a perpetrator to carry out a CSRF attack.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

5.5CVSS5.4AI score0.00414EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/16 12:0 a.m.9 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE arises from improper handling of user actions, allowing unauthorized access to protected information by attackers.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to improper management of user actions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

4.2CVSS5.5AI score0.00272EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/16 12:0 a.m.4 views

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE lies in its algorithmic complexity, which allows attackers to trigger service interruptions.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to algorithmic complexity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service interruptions...

4.3CVSS5.5AI score0.00692EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2024/12/12 12:0 a.m.6 views

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab that stems from requesting a diff fi...

7.5CVSS6.6AI score0.0075EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:0 a.m.4 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE involves improper assignment of ownership rights. This allows attackers to launch attacks on domains by creating groups with names that match the unique domain names.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to improper assignment of ownership rights. Exploiting this vulnerability allows a malicious actor to perform attacks on domains by creating groups with names that match the unique...

3.1CVSS5.6AI score0.00437EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/14 12:0 a.m.4 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to access control errors. This allows a malicious actor to execute continuous integration and continuous delivery processes on arbitrary branches of the software.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to access control errors. Exploiting this vulnerability allows a malicious actor to execute continuous integration and continuous delivery processes on arbitrary branches of the applicatio...

9.6CVSS8.4AI score0.00911EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/11 12:0 a.m.6 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in access control mechanisms. This allows unauthorized individuals to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

3.1CVSS5.5AI score0.00323EPSS
Exploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/19 12:0 a.m.5 views

The vulnerability of the SAML library for Ruby SAML and the Git-based software platform, which is used for collaborative code development on GitLab, allows for an increase in privileges.

The vulnerability of the SAML library for Ruby SAML applications and the Git-based software platform for collaborative code development on GitLab is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to increase their privileges...

10CVSS7.5AI score0.10684EPSS
Exploits3References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/09/10 12:0 a.m.5 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab allows a hacker to replace the code in imported CI/CD pipelines.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to replace the code in imported CI/CD pipelines...

4CVSS5.6AI score0.00329EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/09 12:0 a.m.3 views

The vulnerability of the Resultant Export component of the software platform based on Git for collaborative code development on GitLab allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Resultant Export component of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

6.8CVSS5.6AI score0.00285EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/05 12:0 a.m.5 views

The vulnerability of the adminPushRules function in the Project-level Deploy Token Handler component of the software platform based on Git, which facilitates collaborative code development in GitLab. This vulnerability allows a malicious user to create deployment tokens at the project level.

The vulnerability of the adminPushRules function in the Project-level Deploy Token Handler component of the software platform based on Git for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to crea...

5.5CVSS5.5AI score0.00328EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/24 12:0 a.m.6 views

The vulnerability of the Email Address Handler component of the software platform based on Git for collaborative code development on GitLab allows a malicious individual to gain unauthorized access to limited functions.

The vulnerability of the Email Address Handler component in the Git-based software platform, which is used for collaborative code development on GitLab, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

4.3CVSS5.6AI score0.00469EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/24 12:0 a.m.7 views

The vulnerability of the GraphQL Subscription Handler component of the software platform based on Git, which facilitates collaborative code development on GitLab, allows a malicious individual to gain unauthorized access to confidential information.

The vulnerability of the GraphQL Subscription Handler component of the software platform based on Git for collaborative code development on GitLab is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthoriz...

4.3CVSS5.5AI score0.00468EPSS
Exploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/15 12:0 a.m.3 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the use of a regular expression c with inefficient computational complexity, allowing attackers to trigger service interruptions.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.8CVSS5.5AI score0.0049EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/06/17 12:0 a.m.6 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to bypassing authentication using a user-controlled key, allows attackers to circumvent existing security restrictions.

The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to the bypassing of authentication procedures by using a user-controlled key. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions remotely...

4.4CVSS5.5AI score0.00275EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2024/06/12 12:0 a.m.4 views

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab that stems from the presence of a...

4.4CVSS6.4AI score0.00483EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2024/04/05 12:0 a.m.4 views

The vulnerability of the Wiki Page Handler component of the software platform based on Git for collaborative code development on GitLab allows a attacker to perform XSS attacks.

The vulnerability of the Wiki Page Handler component in the git-based software development platform for collaborative code development on GitLab exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS...

8.7CVSS5.5AI score0.0049EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2024/03/07 12:0 a.m.7 views

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in GitLab, which stems from the presence of an...

8CVSS6.9AI score0.00706EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2024/02/28 12:0 a.m.4 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in access control. This allows a malicious individual to alter the headers of deployment keys.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in SSH key management during automated deployment scenarios. Exploiting this vulnerability could allow a malicious actor to modify the headers of deployment private keys...

3.7CVSS5.9AI score0.00322EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/06 12:0 a.m.4 views

The vulnerability of the Cargo.toml file in the git-based software platform, which facilitates collaborative code development on GitLab, allows a hacker to trigger a service failure.

The vulnerability of the Cargo.toml file in the git-based software development platform for collaborative code management on GitLab is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker, operating remotely, t...

6.8CVSS6.6AI score0.00987EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder