EUVD-2019-6556

Malware in sbrugna...

EUVD-2018-13054

Malware in sbrugna...

CVE-2019-15589

An improper access control vulnerability exists in Gitlab...

CVE-2019-15589

An improper access control vulnerability exists in Gitlab v12.3.2, v12.2.6, v12.1.12 which would allow a blocked user would be able to use GIT clone and pull if he had obtained a CI/CD token before...

Improper access control

An improper access control vulnerability exists in Gitlab v12.3.2, v12.2.6, v12.1.12 which would allow a blocked user would be able to use GIT clone and pull if he had obtained a CI/CD token before...

CVE-2019-15589

An improper access control vulnerability exists in Gitlab v12.3.2, v12.2.6, v12.1.12 which would allow a blocked user would be able to use GIT clone and pull if he had obtained a CI/CD token before...

CVE-2019-15589

GitLab vulnerability CVE-2019-15589 affects GitLab releases prior to 12.3.2, 12.2.6, and 12.1.12. It is described as an improper access control flaw where a blocked user could use GIT clone and pull if they had previously obtained a CI/CD token. The connected sources (OSV, NVD, CNVD, etc.) provid...

CVE-2019-15589

Removed by vendor...

GitLab: Blocked user Git access through CI/CD token

Summary A blocked user does not have the ability to utilise Git client operations, GitLab UI access or API access. However, a blocked user can still use Git clone/Git pull client commands if they are able to obtain a CI/CD token before being blocked. This allows them to access projects they are...