26 matches found
CVE-2021-42091
An issue was discovered in Zammad before 4.1.1. SSRF can occur via GitHub or GitLab integration...
Design/Logic Flaw
An issue was discovered in Zammad before 4.1.1. SSRF can occur via GitHub or GitLab integration...
CVE-2021-42091: Server-Side Request Forgery (SSRF)
An issue was discovered in Zammad before 4.1.1. SSRF can occur via GitHub or GitLab integration...
Zammad 代码问题漏洞
Zammad is a web-based open source help desk/customer support system. server-side request forgery vulnerability exists in GitHub, GitLab integration in versions prior to Zammad 4.1.1. No detailed vulnerability details are currently available...
3 Steps to Integrate Rapid7 Products Into the DevSecOps Cycle
DevSecOps is the concept and practice of integrating security into the DevOps cycle. The idea is to bring the different phases of security into the DevOps model and try to automate the entire process, so security is integrated directly into the initial application builds. In this post, we’ll take...
PT-2019-11809 · Jenkins · Jenkins Violation Comments To Gitlab Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Violation Comments to GitLab Plugin version 2.28 and earlier Description: The issue concerns the storage of credentials in an unencrypted manner. Specifically, the plugin stored API tokens unencrypted in job config.xml files and its...