Design/Logic Flaw

An issue was discovered in Zammad before 4.1.1. SSRF can occur via GitHub or GitLab integration...

CVE-2021-42091

An issue was discovered in Zammad before 4.1.1. SSRF can occur via GitHub or GitLab integration...

CVE-2021-42091

An issue was discovered in Zammad before 4.1.1. SSRF can occur via GitHub or GitLab integration...

Zammad 代码问题漏洞

Zammad is a web-based open source help desk/customer support system. server-side request forgery vulnerability exists in GitHub, GitLab integration in versions prior to Zammad 4.1.1. No detailed vulnerability details are currently available...

CVE-2021-42091: Server-Side Request Forgery (SSRF)

An issue was discovered in Zammad before 4.1.1. SSRF can occur via GitHub or GitLab integration...

PT-2021-23518

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 4.1.1 Description An issue was discovered in the software, allowing Server-Side Request Forgery SSRF to occur via GitHub or GitLab integration. Recommendations For versions prior to 4.1.1, update to version 4.1.1 or...

3 Steps to Integrate Rapid7 Products Into the DevSecOps Cycle

DevSecOps is the concept and practice of integrating security into the DevOps cycle. The idea is to bring the different phases of security into the DevOps model and try to automate the entire process, so security is integrated directly into the initial application builds. In this post, we’ll take...

PT-2019-11809 · Jenkins · Jenkins Violation Comments To Gitlab Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Violation Comments to GitLab Plugin version 2.28 and earlier Description: The issue concerns the storage of credentials in an unencrypted manner. Specifically, the plugin stored API tokens unencrypted in job config.xml files and its...