Lucene search
K

60 matches found

BDU FSTEC
BDU FSTEC
added 2024/01/15 12:0 a.m.1 views

The vulnerability of the Remote Development function of the Git-based software platform for collaborative code development on GitLab allows a hacker to gain read, edit, or delete access to data.

The vulnerability of the Remote Development function in the Git-based software platform for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

6.6CVSS6.3AI score0.00552EPSS
Exploits0References5Affected Software1
CNNVD
CNNVD
added 2024/01/12 12:0 a.m.4 views

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab that stems from the ability to bypas...

7.6CVSS7AI score0.00467EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/05/10 12:0 a.m.3 views

The vulnerability of the Merge request approvals function in the software platform based on Git for collaborative code development on GitLab allows a violator to gain unauthorized access to protected information.

The vulnerability of the Merge request approvals function in a Git-based software platform for collaborative code development on GitLab is related to the provision of direct links to objects. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

3.5CVSS7.2AI score0.00621EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2023/04/15 12:0 a.m.4 views

GitLab 代码问题漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in GitLab, which stems from a server-side reque...

9.8CVSS8.3AI score0.00737EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/03/07 12:0 a.m.3 views

GitLab 跨站脚本漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. GitLab suffers from a security vulnerability that stems from a specially craft...

8.7CVSS6.7AI score0.9242EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2022/09/02 12:0 a.m.2 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab allows a hacker to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient validation of input data in the commit field. Exploiting this vulnerability can allow a malicious actor to cause service failures...

4.3CVSS7.3AI score0.01062EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/09/02 12:0 a.m.2 views

The vulnerability of the LivePreview function in the git-based software platform for collaborative code development on GitLab allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the LivePreview function in the Git-based software platform for collaborative code development on GitLab is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

6.8CVSS6.6AI score0.00941EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/09/02 12:0 a.m.1 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from insufficient validation of input data. This allows attackers to introduce arbitrary data.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary data into the Incidents Timeline field...

8.5CVSS7.7AI score0.00846EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/09/02 12:0 a.m.2 views

The vulnerability of the IP address restriction function of the software platform based on Git for collaborative code development on GitLab allows a hacker to circumvent existing security restrictions.

The vulnerability of the IP address restriction function in the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictio...

8.5CVSS7.2AI score0.00652EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:0 a.m.1 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from a lack of mechanisms for encoding or shielding output data. This allows attackers to gain access to confidential information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data...

4.3CVSS5.5AI score0.0087EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:0 a.m.2 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to improper authentication, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the improper handling of OAuth client identifiers. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause servic...

9CVSS7.7AI score0.00837EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:0 a.m.3 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient filtering of feature flag descriptions. Exploiting this vulnerability allows a malicious actor to influence the integrity of data...

6.1CVSS6.4AI score0.00949EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/06 12:0 a.m.1 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab lies in the ability to create and track user-defined tasks for Sentry errors. This allows a violator to access confidential data and compromise its integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the ability for users to create and track issues for Sentry errors. Exploiting this vulnerability allows a malicious actor to gain access to confidential data and compromise its integri...

5.5CVSS6AI score0.00705EPSS
Exploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.5 views

The vulnerability in the software platform based on Git for collaborative code development on GitLab allows a perpetrator to access confidential data.

The vulnerability of the software platform based on Git for collaborative code development on GitLab is related to incorrect authentication. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data...

6.8CVSS6.6AI score0.00974EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.4 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to improper session management, allows a perpetrator to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to improper session management. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

6.8CVSS6.1AI score0.00817EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.2 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to incorrect authentication, allows a perpetrator to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the possibility of adding metadata during the creation of a task by an unauthorized user. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the data...

4.3CVSS5.6AI score0.00573EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.3 views

The vulnerability of the webhook functionality of a software platform based on Git for collaborative code development on GitLab, which allows a hacker to trigger a service failure.

The vulnerability of the Webhook function of a software platform based on Git for collaborative code development on GitLab is related to the provision of unlimited memory. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

6.8CVSS6.9AI score0.01335EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2022/01/13 12:0 a.m.3 views

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. GitLab suffers from a security vulnerability that stems from configuring in a...

6.5CVSS6.5AI score0.01306EPSS
Exploits0References6
OSV
OSV
added 2021/06/11 4:15 p.m.0 views

UBUNTU-CVE-2021-22181

A denial of service vulnerability in GitLab CE/EE affecting all versions since 11.8 allows an attacker to create a recursive pipeline relationship and exhaust resources...

7.7CVSS5.8AI score0.01058EPSS
Exploits0References2
FreeBSD
FreeBSD
added 2021/03/17 12:0 a.m.24 views

Gitlab -- Multiple vulnerabilities

Gigtlab reports: Remote code execution via unsafe user-controlled markdown rendering options...

4.6AI score
Exploits0References1
Rows per page
Query Builder