PT-2024-2727 · Mastodon · Mastodon

Name of the Vulnerable Software and Affected Versions: Mastodon versions prior to 3.5.18 Mastodon versions prior to 4.0.14 Mastodon versions prior to 4.1.14 Mastodon versions prior to 4.2.6 Description: The issue is related to the implementation of CAS, SAML, and OpenID Connect protocols in...

Gitblit External Authentication Providers未明验证绕过漏洞

Bugtraq ID:66324 Gitblit是一个纯Java库用来管理、查看和处理Git资料库。 相关Gitblit的External Authentication Providers存在错误，允许拥有合法用户名的攻击者利用漏洞绕过验证，进行未授权操作。 0 Gitblit 1.x Gitblit 1.4.1已经修复该漏洞，建议用户下载更新： http://gitblit.com...