16 matches found
PT-2026-55353
We have identified an authorization issue in Craft CMS where a forced folder move can delete a conflicting destination folder without destination delete permission. Description Craft CMS’s craftcontrollersAssetsController::actionMoveFolder supports moving an asset folder into a destination parent...
EUVD-2016-4141
Malware in sbrugna...
EUVD-2019-15047
Malware in sbrugna...
CVE-2023-53137
In the Linux kernel, the following vulnerability has been resolved: ext4: Fix possible corruption when moving a directory When we are renaming a directory to a different directory, we need to update '..' entry in the moved directory. However nothing prevents moved directory from being modified an...
CVE-2025-22107 net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105tabledeleteentry There are actually 2 problems: - deleting the last element doesn't require the memmove of elements i + 1, end over it. Actually, element i+1 is out of...
PT-2020-13493 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 10.2 through 13.3.8 GitLab CE/EE versions 13.4 through 13.4.4 GitLab CE/EE versions 13.5 through 13.5.1 Description: Private group information is leaked in GitLab CE/EE when a project is moved from a private to a public...
CVE-2019-5465
An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosure of the newly created issue ID...
CVE-2019-5465: Exposure of Sensitive Information to an Unauthorized Actor
An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosure of the newly created issue ID...
PT-2020-11135
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 8.14 and later Description An information disclosure issue was discovered, which could result in the disclosure of the newly created issue ID when using the move issue feature. Recommendations For GitLab CE/EE versions 8....
CVE-2019-10110
An Insecure Permissions issue issue 1 of 3 was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The "move issue" feature may allow a user to create projects under any namespace on any GitLab instance on which they hold credential...
CVE-2019-10110
An Insecure Permissions issue issue 1 of 3 was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The "move issue" feature may allow a user to create projects under any namespace on any GitLab instance on which they hold credential...
PT-2019-11573
Name of the Vulnerable Software and Affected Versions: GitLab Community and Enterprise Edition versions prior to 11.7.8 GitLab Community and Enterprise Edition versions 11.8.x prior to 11.8.4 GitLab Community and Enterprise Edition versions 11.9.x prior to 11.9.2 Description: An Insecure...
CVE-2019-10110: Incorrect Permission Assignment for Critical Resource
An Insecure Permissions issue issue 1 of 3 was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The "move issue" feature may allow a user to create projects under any namespace on any GitLab instance on which they hold credential...
CVE-2018-10379
An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE before 10.5.8, 10.6.x before 10.6.5, and 10.7.x before 10.7.2. The Move Issue feature contained a persistent XSS vulnerability...
PT-2018-9860
Name of the Vulnerable Software and Affected Versions: GitLab Community Edition CE versions 10.5.x through 10.5.7 GitLab Community Edition CE versions 10.6.x through 10.6.4 GitLab Community Edition CE versions 10.7.x through 10.7.1 GitLab Enterprise Edition EE versions 10.5.x through 10.5.7 GitLa...
CVE-2018-10379: Improper Neutralization of Input During Web Page Generation
An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE before 10.5.8, 10.6.x before 10.6.5, and 10.7.x before 10.7.2. The Move Issue feature contained a persistent XSS vulnerability...