Lucene search
K

7 matches found

OSV
OSV
added 2024/03/06 11:18 a.m.17 views

BIT-GITLAB-2021-39898

In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may allow access to the project which it was exported from...

5.3CVSS5.3AI score0.01245EPSS
Exploits0References4
Veracode
Veracode
added 2023/08/06 7:57 p.m.15 views

Improper Access Control

gitlab is vulnerable to Improper Access Control. The vulnerability allows a project export leak the external webhook token value which allows a attacker to access to the projects...

5.3CVSS6.7AI score0.01245EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2021/11/05 12:15 a.m.16 views

CVE-2021-39898

In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may allow access to the project which it was exported from...

5.3CVSS6.5AI score0.01245EPSS
Exploits0References3
OSV
OSV
added 2021/11/05 12:15 a.m.1 views

UBUNTU-CVE-2021-39898

In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may allow access to the project which it was exported from...

5.3CVSS6AI score0.01245EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2021/11/04 11:21 p.m.25 views

CVE-2021-39898

Removed by vendor...

5.3CVSS6AI score0.01245EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2021/11/04 12:0 a.m.3 views

PT-2021-22744 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 10.6 and later Description: The issue allows a project export to leak the external webhook token value, potentially granting access to the project it was exported from. Recommendations: For GitLab CE/EE versions 10.6 and...

5.3CVSS4.8AI score0.01245EPSS
Exploits0References11
CNVD
CNVD
added 2021/11/01 12:0 a.m.19 views

GitLab Information Disclosure Vulnerability (CNVD-2021-91179)

GitLab is a self-hosted Git version control system project repository application developed in Ruby on Rails by GitLab, Inc. GitLab CE/EE is vulnerable to an information disclosure vulnerability that stems from the fact that project exports can reveal external webhook token values, which can be...

5.3CVSS1.9AI score0.01245EPSS
Exploits0References1
Rows per page
Query Builder