CVE-2024-9870

CVE-2024-9870 is an external service interaction vulnerability in GitLab Enterprise Edition (GitLab EE) affecting all versions from 15.11 up to 17.6.5, 17.7 up to 17.7.4, and 17.8 up to 17.8.2. The issue allows an attacker to cause the GitLab server to issue requests to unintended external servic...

CVE-2024-9870 Unintended Proxy or Intermediary ('Confused Deputy') in GitLab

An external service interaction vulnerability in GitLab EE affecting all versions from 15.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send requests from the GitLab server to unintended services...

CVE-2024-9870

Removed by vendor...

CVE-2024-9870 Unintended Proxy or Intermediary ('Confused Deputy') in GitLab

An external service interaction vulnerability in GitLab EE affecting all versions from 15.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send requests from the GitLab server to unintended services...

PT-2025-6773 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 15.11 through 17.6.4 GitLab EE versions 17.7 through 17.7.3 GitLab EE versions 17.8 through 17.8.1 Description: An external service interaction issue in GitLab EE allows an attacker to send requests from the GitLab server t...

GitLab Enterprise Edition 安全漏洞

GitLab Enterprise Edition EE is a content management system from GitLab, Inc. in the United States. A security vulnerability exists in GitLab Enterprise Edition that stems from an external service interaction that does not restrict the request target...

MAL-2025-191738 Malicious code in getpublicip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 041ba7130d1460fe6480d062c61c78db3b88cc5c6d060913d0501fdbdc7c35b0 If installed using source package, the package collects selected environment variables, including GITHUBTOKEN if set, and sends to an external service. The...

CLSA-2024-1732702216 squid34: Fix of CVE-2024-45802

CVE-2024-45802: disable ESI...

CVE-2021-38135

Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000...

CVE-2021-38135

Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000...

CVE-2021-38135 Possible External service interaction Vulnerability in OpenText iManager

Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000...

CVE-2021-38135 Possible External service interaction Vulnerability in OpenText iManager

Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000...

CVE-2021-38135

CVE-2021-38135 affects OpenText iManager 3.2.6.0000 with a described External Service Interaction attack. The connected documents provide only high-level vulnerability descriptions and version details; no concrete root-cause, vulnerable subcomponents, or exploit details are specified. Public scor...

PT-2024-10995 · Opentext · Opentext Imanager

Name of the Vulnerable Software and Affected Versions: OpenText iManager version 3.2.6.0000 Description: A Possible External Service Interaction attack in iManager has been discovered. Recommendations: For OpenText iManager version 3.2.6.0000, at the moment, there is no information about a newer...

OpenText iManager 安全漏洞

OpenText iManager is a web-based management tool from OpenText Canada. A security vulnerability exists in OpenText iManager version 3.2.6.0000, which originates from a possible external service interaction attack in iManager...

codechecker authentication method confusion vulnerability allows logging in as the built-in root user from an external service

Summary Authentication method confusion allows logging in as the built-in root user from an external service. The built-in root user is generated in a weak manner, cannot be disabled, and has universal access. Details Until CodeChecker version 6.24.1 there was an auto-generated super-user account...

GHSA-FPM5-2WCJ-VFR7 codechecker authentication method confusion vulnerability allows logging in as the built-in root user from an external service

Summary Authentication method confusion allows logging in as the built-in root user from an external service. The built-in root user is generated in a weak manner, cannot be disabled, and has universal access. Details Until CodeChecker version 6.24.1 there was an auto-generated super-user account...

CVE-2024-10082

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication method confusion allows logging in as the built-in root user from an external service. The built-in root user up until 6.24.1 is generated in a weak manner, cannot...

PYSEC-2024-183

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication method confusion allows logging in as the built-in root user from an external service. The built-in root user up until 6.24.1 is generated in a weak manner, cannot...

CVE-2024-10082

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication method confusion allows logging in as the built-in root user from an external service. The built-in root user up until 6.24.1 is generated in a weak manner, cannot...