10 matches found
EUVD-2026-70130
Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators...
EUVD-2023-38326
Malicious code in bioql PyPI...
CVE-2023-34229
In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible...
CVE-2023-34229
In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible...
CVE-2023-34229
In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible...
Cross site scripting
In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible...
CVE-2023-34229
CVE-2023-34229 affects JetBrains TeamCity prior to version 2023.05, where a stored XSS in the GitLab Connection page is possible. The issue is addressed in 2023.05 and later; guidance from Nessus/PTSecurity recommends upgrading to 2023.05 or newer to resolve the vulnerability. The CVE’s public sc...
CVE-2023-34229
In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible...
PT-2023-24754 · Jetbrains · Teamcity
Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2023.05 Description: The issue concerns a stored XSS in the GitLab Connection page. Recommendations: For versions prior to 2023.05, update to version 2023.05 or later to resolve the issue...
