SAMSUNG Group Sharing 安全漏洞

SAMSUNG Group Sharing is a basic application from Samsung South Korea that is installed on Samsung Galaxy devices. A security vulnerability exists in SAMSUNG Group Sharing versions prior to 10.8.03.2, which can be exploited by an attacker to access contact information...

PT-2021-16694 · Unknown · Group Sharing

Name of the Vulnerable Software and Affected Versions: Group Sharing versions prior to 10.8.03.2 Description: The issue allows an attacker to access contact information due to an intent redirection vulnerability in Group Sharing. Recommendations: For versions prior to 10.8.03.2, update to version...

GitLab EE elevation of privilege vulnerability (CNVD-2020-13199)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. An elevation of privilege vulnerability exists in GitLab EE...

CVE-2020-8795

In GitLab Enterprise Edition EE 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users...

CVE-2020-8795

In GitLab Enterprise Edition EE 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users...

CVE-2020-8795

In GitLab Enterprise Edition EE 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users...

CVE-2020-8795

In GitLab Enterprise Edition EE 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users...

CVE-2020-8795

Removed by vendor...

PT-2020-20284 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab Enterprise Edition EE versions 12.5.0 through 12.7.5 Description: The issue allows project access to unauthorized users when a group is shared with another group. Recommendations: For GitLab Enterprise Edition EE versions 12.5.0 throug...

Gitlab -- Vulnerability

Gitlab reports: Incorrect membership handling of group sharing feature...

GitLab: Privilege escalation to access all private groups and repositories

Vulnerability details There is an insecure direct object reference IDOR issue in the group sharing feature for a project. This allows an attacker to get access to the names of private repositories of a group, issues, milestones, and the group its team members. Proof of concept First, lets set up...