GitLab: Boards leak private label names and desciptions

Vulnerability details In anticipation of today's release, I took a look at the new boards feature - which, unrelated to this report, is awesome! There turns out to be an IDOR vulnerability when creating a list based on a label. An attacker can create a list with a label ID that belongs to a priva...

Cloud Source Repositories: Google Quietly Launches GitHub Competitor

After the death of Google code this winter, Google is apparently back in the business through the launch of its private Git repository hosting service on Google Cloud Platform called Cloud Source Repositories. Not yet officially announced, but Google started providing free beta access to its new...

CVE-2023-38707

CVE-2023-38707 described as rejected/not used; not a public vulnerability entry per CNA rule 7.4.7.

CVE-2023-49787

CVE-2023-49787 entry is rejected/not used and does not represent an active vulnerability.