GitLab input validation error vulnerability

A input validation error vulnerability exists in GitLab CE/EE versions from 18.3 up to and including 19.3.6, from 19.4 up to and including 19.4.3, and from 19.5 up to and including 19.5.1. This vulnerability stems from improper trust of user-supplied values when constructing endpoint URLs within...

Eclipse CSI - PIA server request forgery vulnerability

Eclipse CSI – Versions 0.8.0 and earlier contain a server-side request forgery vulnerability. This vulnerability arises because the verifytoken function fails to parse the jwksuri in OIDC discovery documents as a URL, fails to compare it with the source of an approved issuer, and does not enforce...