GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in GitLab CE/EE versions 14.4 through 15.2.5,...

GHSA-8VFC-FCR2-47PJ Path traversal in Jenkins REPO Plugin

SCMs support a number of different URL schemes, including local file system paths e.g. using file: URLs. Historically in Jenkins, only agents checked out from SCM, and if multiple projects share the same agent, there is no expected isolation between builds besides using different workspaces unles...

Dradis information leakage vulnerability

Dradis is a suite of reporting and collaboration tools for information security teams. A security vulnerability exists in the API in Dradis Pro version 3.4.1. The vulnerability can be exploited by an attacker to extract the contents of a project even if the attacker is not a member of the project...