Lucene search
+L

86 matches found

OSV
OSV
added 2022/10/17 4:15 p.m.11 views

CVE-2017-7517

An input validation vulnerability exists in Openshift Enterprise due to a 1:1 mapping of tenants in Hawkular Metrics and projects/namespaces in OpenShift. If a user creates a project called "MyProject", and then later deletes it another user can then create a project called "MyProject" and access...

3.5CVSS5.8AI score0.00478EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/10/17 12:00 a.m.10 views

Red Hat OpenShift 输入验证错误漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat that enables building, testing, deploying and running applications. An input validation error vulnerability exists in Redhat Openshift Enterprise, which arises when a user creates a project named "MyProject" a...

3.5CVSS5.1AI score0.00478EPSS
SaveExploits0References3
OSV
OSV
added 2021/10/05 1:15 p.m.16 views

CVE-2021-39866

A business logic error in the project deletion process in GitLab 13.6 and later allows persistent access via project access tokens...

5.4CVSS6.4AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/10/05 1:15 p.m.8 views

CVE-2021-39866

A business logic error in the project deletion process in GitLab 13.6 and later allows persistent access via project access tokens...

5.5CVSS6AI score0.00983EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2021/10/05 1:15 p.m.17 views

Design/Logic Flaw

A business logic error in the project deletion process in GitLab 13.6 and later allows persistent access via project access tokens...

5.5CVSS5.5AI score0.00983EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2021/10/05 1:15 p.m.24 views

CVE-2021-39866

A business logic error in the project deletion process in GitLab 13.6 and later allows persistent access via project access tokens...

5.5CVSS6.1AI score0.00983EPSS
SaveExploits0References4
OSV
OSV
added 2021/10/05 1:15 p.m.10 views

UBUNTU-CVE-2021-39866

A business logic error in the project deletion process in GitLab 13.6 and later allows persistent access via project access tokens...

5.4CVSS5.8AI score0.00983EPSS
SaveExploits0References5
CVE
CVE
added 2021/10/05 12:35 p.m.77 views

CVE-2021-39866

CVE-2021-39866 describes a business-logic flaw in GitLab’s project deletion flow that grants persistent access via project access tokens for GitLab 13.6 and later. Affected products: GitLab (13.6+). Root cause: incorrect handling in the project deletion process allows token-based persistence. Imp...

5.5CVSS5.5AI score0.00983EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/10/05 12:35 p.m.28 views

CVE-2021-39866

A business logic error in the project deletion process in GitLab 13.6 and later allows persistent access via project access tokens...

5.4CVSS5.9AI score0.00983EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/10/05 12:00 a.m.4 views

PT-2021-22713 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 13.6 and later Description: A business logic error in the project deletion process allows persistent access via project access tokens. Recommendations: For GitLab versions 13.6 and later, update to a version that includes a fi...

5.5CVSS5.1AI score0.00983EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2021/10/01 12:00 a.m.9 views

GitLab 安全漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to view a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab that stems from a...

5.5CVSS5.7AI score0.00983EPSS
SaveExploits0References6
Atlassian
Atlassian
added 2021/05/20 10:43 p.m.36 views

Bitbucket XSS, privilege escalation from "Project Creator" to "System admin" on project deletion

This vulnerability affects certain versions of Atlassian Dev Tools. Please describe the impact of the vulnerability here. No known vulnerability could be read off of the parent...

5.6AI score
SaveExploits0Affected Software1
OSV
OSV
added 2021/03/02 7:15 p.m.4 views

UBUNTU-CVE-2021-22187

An issue has been discovered in GitLab affecting all versions of Gitlab EE/CE before 13.6.7. A potential resource exhaustion issue that allowed running or pending jobs to continue even after project was deleted...

4.3CVSS5.7AI score0.01038EPSS
SaveExploits0References4
Prion
Prion
added 2021/03/02 7:15 p.m.16 views

Code injection

An issue has been discovered in GitLab affecting all versions of Gitlab EE/CE before 13.6.7. A potential resource exhaustion issue that allowed running or pending jobs to continue even after project was deleted...

4CVSS4.3AI score0.01038EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2021/03/02 7:15 p.m.25 views

CVE-2021-22187

An issue has been discovered in GitLab affecting all versions of Gitlab EE/CE before 13.6.7. A potential resource exhaustion issue that allowed running or pending jobs to continue even after project was deleted...

4.3CVSS5.8AI score0.01038EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/03/02 7:15 p.m.4 views

CVE-2021-22187

An issue has been discovered in GitLab affecting all versions of Gitlab EE/CE before 13.6.7. A potential resource exhaustion issue that allowed running or pending jobs to continue even after project was deleted...

4.3CVSS5.8AI score0.01038EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2021/03/02 6:15 p.m.71 views

CVE-2021-22187

CVE-2021-22187 affects GitLab EE/CE before 13.6.7. The issue is a resource-exhaustion condition that allows running or pending jobs to continue after the associated project is deleted. Documents consistently describe the vulnerability in GitLab software and versions but do not provide concrete re...

4.3CVSS4.2AI score0.01038EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2021/03/02 6:15 p.m.52 views

CVE-2021-22187

Removed by vendor...

4.3CVSS5.8AI score0.01038EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/03/02 12:00 a.m.11 views

GitLab 资源管理错误漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A resource management error vulnerability exists in Gitla...

4.3CVSS5.5AI score0.01038EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/03/02 12:00 a.m.3 views

PT-2021-14898 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 13.6.7 Description: A potential resource exhaustion issue has been discovered in GitLab, where running or pending jobs could continue even after a project was deleted. Recommendations: For versions prior to 13.6.7,...

4.3CVSS4.3AI score0.01038EPSS
SaveExploits0References12
Rows per page
Query Builder