Lucene search
+L

34 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 8:47 p.m.•11 views

CVE-2021-22245

Improper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in a project impossible to view...

4CVSS6.8AI score0.01366EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/01/03 12:00 a.m.•29 views

GitLab < 13.12.9 (CVE-2021-22245)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Improper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in a project impossible to view CVE-2021-22245 Note that Nessus has not tested for...

4CVSS5AI score0.01366EPSS
SaveExploits0References4
OSV
OSV
•added 2021/08/25 7:15 p.m.•33 views

CVE-2021-22245

Improper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in a project impossible to view...

2.7CVSS6.2AI score
SaveExploits0References3
attackerkb
attackerkb
•added 2021/08/25 7:15 p.m.•8 views

CVE-2021-22245

Improper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in a project impossible to view...

4CVSS5.8AI score0.01366EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2021/08/25 7:15 p.m.•12 views

UBUNTU-CVE-2021-22245

Improper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in a project impossible to view...

2.7CVSS5.8AI score0.01366EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2021/08/25 6:31 p.m.•47 views

CVE-2021-22245

Improper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in a project impossible to view...

2.7CVSS3.6AI score0.01366EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/08/25 12:00 a.m.•12 views

PT-2021-6754 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to the fixed version Description: The issue is related to improper validation of commit author in GitLab, allowing an attacker to make several pages in a project impossible to view. This can be exploited by a remot...

4CVSS3.5AI score0.01366EPSS
SaveExploits0References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/25 12:00 a.m.•3 views

CVE-2021-22245: Improper Input Validation

Improper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in a project impossible to view...

4CVSS5.7AI score0.01366EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/06/03 12:00 a.m.•36 views

FreeBSD : Gitlab -- Multiple Vulnerabilities (5f52d646-c31f-11eb-8dcf-001b217b3468)

Gitlab reports : Stealing GitLab OAuth access tokens using XSLeaks in Safari Denial of service through recursive triggered pipelines Unauthenticated CI lint API may lead to information disclosure and SSRF Server-side DoS through rendering crafted Markdown documents Issue and merge request length...

7.7CVSS6.8AI score0.01101EPSS
SaveExploits0References3
FreeBSD
FreeBSD
•added 2021/06/01 12:00 a.m.•53 views

Gitlab -- Multiple Vulnerabilities

Gitlab reports: Stealing GitLab OAuth access tokens using XSLeaks in Safari Denial of service through recursive triggered pipelines Unauthenticated CI lint API may lead to information disclosure and SSRF Server-side DoS through rendering crafted Markdown documents Issue and merge request length...

7.7CVSS1.4AI score0.01101EPSS
SaveExploits0References1
OSV
OSV
•added 2018/02/16 6:29 p.m.•18 views

CVE-2017-18090

Various resources in Atlassian Fisheye before version 4.5.1 the fixed version for 4.5.x and before version 4.6.0 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the name of a commit author...

6.1CVSS5.4AI score0.0085EPSS
SaveExploits0References2
Prion
Prion
•added 2018/02/16 6:29 p.m.•27 views

Cross site scripting

Various resources in Atlassian Fisheye before version 4.5.1 the fixed version for 4.5.x and before version 4.6.0 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the name of a commit author...

4.3CVSS6AI score0.0085EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2018/02/16 6:00 p.m.•34 views

CVE-2017-18090

Various resources in Atlassian Fisheye before version 4.5.1 the fixed version for 4.5.x and before version 4.6.0 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the name of a commit author...

6AI score0.0085EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/16 12:00 a.m.•7 views

CVE-2017-18090: Improper Neutralization of Input During Web Page Generation

Various resources in Atlassian Fisheye before version 4.5.1 the fixed version for 4.5.x and before version 4.6.0 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the name of a commit author...

6.1CVSS5.8AI score0.0085EPSS
SaveExploits0References2
Rows per page
Query Builder