CVE-2023-1708

CVE-2023-1708 affects GitLab CE/EE, where non-printable characters copied from the clipboard can trigger execution of unexpected commands on the victim machine. Affected versions are GitLab CE/EE 1.0 up to but not including 15.8.5, 15.8.x up to 15.8.4, 15.9 up to but not including 15.9.4, and 15....

PT-2023-17186

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 1.0 through 15.8.4 GitLab CE/EE versions 15.9 through 15.9.3 GitLab CE/EE versions 15.10 through 15.10.0 Description An issue was identified in GitLab CE/EE where non-printable characters get copied from the clipboard,...

CVE-2023-1708: Improper Neutralization of Special Elements used in a Command

An issue was identified in GitLab CE/EE affecting all versions from 1.0 prior to 15.8.5, 15.9 prior to 15.9.4, and 15.10 prior to 15.10.1 where non-printable characters gets copied from clipboard, allowing unexpected commands to be executed on victim machine...

CVE-2023-1708

An issue was identified in GitLab CE/EE affecting all versions from 1.0 prior to 15.8.5, 15.9 prior to 15.9.4, and 15.10 prior to 15.10.1 where non-printable characters gets copied from clipboard, allowing unexpected commands to be executed on victim machine...

CVE-2023-1708

An issue was identified in GitLab CE/EE affecting all versions from 1.0 prior to 15.8.5, 15.9 prior to 15.9.4, and 15.10 prior to 15.10.1 where non-printable characters gets copied from clipboard, allowing unexpected commands to be executed on victim machine...

CVE-2023-1098

An information disclosure vulnerability has been discovered in GitLab EE/CE affecting all versions starting from 11.5 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 will allow an admin to leak password from repository mirror...

CVE-2023-1098: Exposure of Information Through Shell Error Message

An information disclosure vulnerability has been discovered in GitLab EE/CE affecting all versions starting from 11.5 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 will allow an admin to leak password from repository mirror...

CVE-2023-1708

Removed by vendor...

SUSE: Security Advisory (SUSE-SU-2023:1628-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-27100: Improper Restriction of Excessive Authentication Attempts

Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows attackers to bypass brute force protection mechanisms via crafted web requests...

PT-2023-20955 · Netgate · Pfsense Ce +1

Name of the Vulnerable Software and Affected Versions: pfSense Plus software version 22.05.1 pfSense CE software version 2.6.0 Description: The issue is related to improper restriction of excessive authentication attempts in the SSHGuard component, allowing attackers to bypass brute force...

CVE-2023-1084

An issue has been discovered in GitLab CE/EE affecting all versions before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. A malicious project Maintainer may create a Project Access Token with Owner level privileges using a crafted request...

CVE-2023-1084

CVE-2023-1084 affects GitLab CE/EE. Affected versions include all before 15.7.8, 15.8 before 15.8.4, and 15.9 before 15.9.2. The issue allows a malicious project Maintainer to create a Project Access Token with Owner level privileges via a crafted request. Primary sources (NVD, OSV, and vendor di...

CVE-2023-1084: Undefined Security Weakness

An issue has been discovered in GitLab CE/EE affecting all versions before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. A malicious project Maintainer may create a Project Access Token with Owner level privileges using a crafted request...

CVE-2023-1084

An issue has been discovered in GitLab CE/EE affecting all versions before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. A malicious project Maintainer may create a Project Access Token with Owner level privileges using a crafted request...

CVE-2023-1084

Removed by vendor...

CVE-2022-4007

A issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8, version 15.8 prior to 15.8.4, and version 15.9 prior to 15.9.2 A cross-site scripting vulnerability was found in the title field of work items that allowed attackers to perform arbitrary actions on behal...

CVE-2022-4007

GitLab CE/EE: A cross-site scripting (XSS) vulnerability in the title field of work items affects all versions from 15.3 up to, but not including, 15.7.8; 15.8 up to, but not including, 15.8.4; and 15.9 up to, but not including, 15.9.2. The issue allows attackers to perform arbitrary actions on b...

CVE-2022-4007

A issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8, version 15.8 prior to 15.8.4, and version 15.9 prior to 15.9.2 A cross-site scripting vulnerability was found in the title field of work items that allowed attackers to perform arbitrary actions on behal...

CVE-2022-4007: Improper Neutralization of Input During Web Page Generation

A issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8, version 15.8 prior to 15.8.4, and version 15.9 prior to 15.9.2 A cross-site scripting vulnerability was found in the title field of work items that allowed attackers to perform arbitrary actions on behal...