Lucene search
+L

78 matches found

BDU FSTEC
BDU FSTEC
•added 2023/05/10 12:00 a.m.•22 views

GitLab Merge Request Approvals Unauthorized Access

The vulnerability of the Merge request approvals function in a Git-based software platform for collaborative code development on GitLab is related to the provision of direct links to objects. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

3.5CVSS7.2AI score0.00621EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
•added 2023/04/15 12:00 a.m.•26 views

GitLab 代码问题漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in GitLab, which stems from a server-side reque...

9.8CVSS8.3AI score0.00737EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/03/07 12:00 a.m.•21 views

GitLab 跨站脚本漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. GitLab suffers from a security vulnerability that stems from a specially craft...

8.7CVSS6.7AI score0.9242EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2022/09/02 12:00 a.m.•18 views

LivePreview Function Unauthorized Access

The vulnerability of the LivePreview function in the Git-based software platform for collaborative code development on GitLab is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

6.8CVSS6.6AI score0.00906EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/09/02 12:00 a.m.•20 views

GitLab DoS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient validation of input data in the commit field. Exploiting this vulnerability can allow a malicious actor to cause service failures...

4.3CVSS7.3AI score0.01571EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/09/02 12:00 a.m.•61 views

GitLab IP Address Restriction Bypass

The vulnerability of the IP address restriction function in the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictio...

8.5CVSS7.2AI score0.0094EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/09/02 12:00 a.m.•22 views

GitLab Arbitrary Data Validation

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary data into the Incidents Timeline field...

8.5CVSS7.7AI score0.01134EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/13 12:00 a.m.•24 views

GitLab Git Data Compromise

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient filtering of feature flag descriptions. Exploiting this vulnerability allows a malicious actor to influence the integrity of data...

6.1CVSS6.4AI score0.01018EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/13 12:00 a.m.•21 views

GitLab Information Disclosure

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data...

4.3CVSS5.5AI score0.0087EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/13 12:00 a.m.•12 views

GitLab Improper Authentication Confidential Data Compromise

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the improper handling of OAuth client identifiers. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause servic...

9CVSS7.7AI score0.00865EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/06 12:00 a.m.•18 views

GitLab Task Tracking Confidential Data Compromise

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the ability for users to create and track issues for Sentry errors. Exploiting this vulnerability allows a malicious actor to gain access to confidential data and compromise its integri...

5.5CVSS6AI score0.00729EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•22 views

GitLab Confidential Data Access

The vulnerability of the software platform based on Git for collaborative code development on GitLab is related to incorrect authentication. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data...

6.8CVSS6.6AI score0.01006EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•21 views

GitLab Improper Session Management

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to improper session management. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

6.8CVSS6.1AI score0.00844EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•21 views

GitLab Authentication Issue

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the possibility of adding metadata during the creation of a task by an unauthorized user. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the data...

4.3CVSS5.6AI score0.00592EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•15 views

GitLab Webhook DoS

The vulnerability of the Webhook function of a software platform based on Git for collaborative code development on GitLab is related to the provision of unlimited memory. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

6.8CVSS6.9AI score0.01335EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
•added 2022/01/13 12:00 a.m.•22 views

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. GitLab suffers from a security vulnerability that stems from configuring in a...

6.5CVSS6.5AI score0.01306EPSS
SaveExploits0References6
osv_ubuntu
osv_ubuntu
•added 2021/06/11 4:15 p.m.•14 views

UBUNTU-CVE-2021-22181

A denial of service vulnerability in GitLab CE/EE affecting all versions since 11.8 allows an attacker to create a recursive pipeline relationship and exhaust resources...

7.7CVSS5.8AI score0.01101EPSS
SaveExploits0References2
FreeBSD
FreeBSD
•added 2021/03/17 12:00 a.m.•24 views

Gitlab -- Multiple vulnerabilities

Gigtlab reports: Remote code execution via unsafe user-controlled markdown rendering options...

4.6AI score
SaveExploits0References1
Rows per page
Query Builder