Lucene search
+L

7 matches found

Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2021-39872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability allows users with expired password to still access GitLab through g...

6.5CVSS6.4AI score0.00989EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2024/01/04 12:30 p.m.•47 views

@backstage/backend-app-api leaks GitLab access tokens

A flaw was found in the Red Hat Developer Hub RHDH. The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gainin...

5.7CVSS6.9AI score0.00561EPSS
SaveExploits0References10Affected Software1
OSV
OSV
•added 2024/01/04 12:30 p.m.•45 views

GHSA-86RG-PF4C-5GRG @backstage/backend-app-api leaks GitLab access tokens

A flaw was found in the Red Hat Developer Hub RHDH. The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gainin...

7.3CVSS5.4AI score0.00561EPSS
SaveExploits0References10
NVD
NVD
•added 2024/01/04 10:15 a.m.•45 views

CVE-2023-6944

A flaw was found in the Red Hat Developer Hub RHDH. The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gainin...

5.7CVSS5.5AI score0.00561EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/01/04 10:02 a.m.•47 views

CVE-2023-6944 Rhdh: catalog-import function leaks credentials to frontend

A flaw was found in the Red Hat Developer Hub RHDH. The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gainin...

5.7CVSS5.7AI score0.00561EPSS
SaveExploits0References3
OSV
OSV
•added 2024/01/04 10:02 a.m.•22 views

CVE-2023-6944 Rhdh: catalog-import function leaks credentials to frontend

A flaw was found in the Red Hat Developer Hub RHDH. The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gainin...

5.7CVSS6.6AI score
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2023/12/19 9:26 p.m.•48 views

CVE-2023-6944

A flaw was found in the Red Hat Developer Hub RHDH. The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gainin...

5.7CVSS5.4AI score0.00561EPSS
SaveExploits0References3
Rows per page
Query Builder