4439 matches found
CVE-2024-4557 Uncontrolled Resource Consumption in GitLab
Multiple Denial of Service DoS conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1 which allowed an attacker to cause resource exhaustion via banzai pipeline...
CVE-2024-4557
Removed by vendor...
CVE-2024-4557
CVE-2024-4557 is an active GitLab DoS vulnerability affecting GitLab CE/EE. The issue enables resource exhaustion via the banzai pipeline in affected releases: GitLab 1.0–16.11.4, 17.0–17.0.2, and 17.1–17.1.0 (up to but not including fixed versions). Multiple connected sources describe the root c...
CVE-2024-5655 Improper Access Control in GitLab
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to trigger a pipeline as another user under certain circumstances...
CVE-2024-5655
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to trigger a pipeline as another user under certain circumstances...
CVE-2024-5655 Improper Access Control in GitLab
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to trigger a pipeline as another user under certain circumstances...
CVE-2024-5655
GitLab CVE-2024-5655 affects GitLab CE/EE versions: 15.8–16.11.4, 17.0–17.0.2, and 17.1–17.1.0 (all builds before fixed releases). The issue allows an attacker to trigger a pipeline as another user under certain circumstances (improper access control). Remediation per sources: update to GitLab 16...
de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31), org.jenkins-ci.plugins.workflow:puppet-enterprise-pipeline (>=1.2.1, <=1.3.1) +5 more potentially affected by CVE-2024-39459 via org.jenkins-ci.plugins:plain-credentials (1.2)
org.jenkins-ci.plugins:plain-credentials MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:plain-credentials and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =1.2.1, =1.0.0, =1.58, =1.18, =1.0,...
com.coravy.hudson.plugins.github:github (>=1.13.0-alpha-1, <=1.29.4), com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.0.9, <=4.1.6) +43 more potentially affected by CVE-2024-39459 via org.jenkins-ci.plugins:plain-credentials (1.1)
org.jenkins-ci.plugins:plain-credentials MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:plain-credentials and may be impacted: - com.coravy.hudson.plugins.github:github =1.13.0-alpha-1, =4.0.9, =0.0.1, =1.3.1,...
GitLab Resource Management Error Vulnerability
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A resource management error vulnerability exists in GitLab CE/EE versions 1.0...
GitLab Access Control Error Vulnerability
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. An access control error vulnerability exists in GitLab EE. An attacker...
PT-2024-4368
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 15.8 through 16.11.5 GitLab CE/EE versions 17.0 through 17.0.3 GitLab CE/EE versions 17.1 through 17.1.1 Description An issue in GitLab CE/EE allows an attacker to trigger a pipeline as another user under certain...
The vulnerability of the CI/CD pipeline editor of a Git-based software platform for collaborative code development on GitLab allows a hacker to trigger a service failure.
The vulnerability of the CI/CD pipeline editor of a Git-based software platform for collaborative code development on GitLab is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using specially created malware...
Malicious code in bosh_plugin-pipeline (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6791 Malicious code in bosh_plugin-pipeline (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in assets-pipeline (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in asset-pipeline (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6701 Malicious code in asset-pipeline (RubyGems)
--- -= Per source details. Do not edit below this line.=-...