758 matches found
GitLab Cross-Site Scripting Vulnerability (CNVD-2020-19226)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A cross-site scripting vulnerability exists in GitLab...
CVE-2020-10090
GitLab 11.7 through 12.8.1 allows Information Disclosure. Under certain group conditions, group epic information was unintentionally being disclosed...
PT-2020-11915 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 11.7 through 12.8.1 Description: The issue allows for information disclosure under certain group conditions, where group epic information was unintentionally being disclosed. Recommendations: For GitLab versions 11.7 through...
A week in security (February 17 – 23)
Last week on Malwarebytes Labs, we highlighted the benefits and concerns of identity-as-a-service IDaaS, an identity management scheme deployed from the cloud; reported on scammers and squatters taking advantage of Rudy Giuliani’s Twitter typos; and gave a high-level overview of RobbinHood, the...
Latest LokiBot malware variant distributed as Epic Games installer
By Deeba Ahmed The new variant of the notorious LokiBot malware is more sophisticated and effective than its previous versions. This is a post from HackRead.com Read the original post: Latest LokiBot malware variant distributed as Epic Games installer...
CVE-2019-5472
An authorization issue was discovered in Gitlab versions 12.1.2, 12.0.4, and 11.11.6 that prevented owners and maintainer to delete epic comments...
Authorization
An authorization issue was discovered in Gitlab versions 12.1.2, 12.0.4, and 11.11.6 that prevented owners and maintainer to delete epic comments...
CVE-2019-5472
An authorization issue was discovered in Gitlab versions 12.1.2, 12.0.4, and 11.11.6 that prevented owners and maintainer to delete epic comments...
CVE-2019-5472
An authorization issue was discovered in Gitlab versions 12.1.2, 12.0.4, and 11.11.6 that prevented owners and maintainer to delete epic comments...
CVE-2019-5472
CVE-2019-5472 : In GitLab, an authorization issue in versions older than 12.1.2, 12.0.4, and 11.11.6 prevented owners and maintainers from deleting epic comments. Affected components are the GitLab epics/authorization flow; the root cause is improper access control on epic comment deletion. Impac...
CVE-2019-5472
Removed by vendor...
CVE-2019-18461
An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.3 when a sub group epic is added to a public group. It has Incorrect Access Control...
Improper access control
An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.3 when a sub group epic is added to a public group. It has Incorrect Access Control...
CVE-2019-18461
Removed by vendor...
CVE-2019-18461
An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.3 when a sub group epic is added to a public group. It has Incorrect Access Control...
CVE-2014-10396
The CVE-2014-10396 entry corresponds to a vulnerability in the Epic WordPress theme (prior to fix date not provided in the documents) that allows arbitrary file downloads through the file parameter to includes/download.php. Affected component: Epic WordPress theme; vulnerability type: arbitrary f...
CVE-2014-10396
The epic theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to includes/download.php...
CVE-2019-15725
An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. An IDOR in the epic notes API that could result in disclosure of private milestones, labels, and other information...
CVE-2019-15725
CVE-2019-15725 affects GitLab Community and Enterprise Edition 12.0–12.2.1. The issue is an Insecure Direct Object Reference (IDOR) in the Epic Notes API that can disclose private milestones, labels, and other information. Root cause: improper access control on epic notes data. Impact: disclosure...