5721 matches found
Filter for custom field values shows all options from all contexts
h3. Summary If a custom field is added to a Portfolio plan, the Portfolio filter will show all options from all contexts configured in the custom field in Jira. h3. Steps to Reproduce Create a custom field with multiple contexts and values across contexts. Assign different projects to separate...
Visma Public: Ability to delete projects from Archived companies (Read only version)
The researcher discovered that Projects can be deleted from Archived companies which have "read only version".It was assessed as Low impact...
SFO Websites Hacked: Airport Discloses Data Breach
The San Francisco International Airport SFO disclosed this week two of its websites had been hacked and lead to the disclosure of some users’ login credentials at both sites. The attacks occurred in March and compromised were SFOConnect.com and SFOConstruction.com, both relatively low-traffic...
UBUNTU-CVE-2020-10977
GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects...
CVE-2020-10977
GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects...
[SECURITY] Fedora 31 Update: python-nltk-3.4.5-2.fc31
NLTK is a Python package that simplifies the construction of programs that process natural language; and defines standard interfaces between the different components of an NLP system. It was designed primarily to help teach graduate and undergraduate students about computational linguistics; but ...
GitLab Information Disclosure Vulnerability (CNVD-2020-19019)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...
GitLab Input Validation Error Vulnerability (CNVD-2020-190200)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An input validation error vulnerability exists in GitLab...
CVE-2020-10083
GitLab 12.7 through 12.8.1 has Insecure Permissions. Under certain conditions involving groups, project authorization changes were not being applied...
CVE-2019-12434
An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11. Users could guess the URL slug of private projects through the contrast of the destination URLs of issues linked in comments. It allows Information Disclosure...
CVE-2019-12434
An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11. Users could guess the URL slug of private projects through the contrast of the destination URLs of issues linked in comments. It allows Information Disclosure...
Input validation
An issue was discovered in GitLab Community and Enterprise Edition 11.7 through 11.11. It has Improper Input Validation. Restricted visibility settings allow creating internal projects in private groups, leading to multiple permission issues...
Information disclosure
An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11. Users could guess the URL slug of private projects through the contrast of the destination URLs of issues linked in comments. It allows Information Disclosure...
CVE-2019-12434
An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11. Users could guess the URL slug of private projects through the contrast of the destination URLs of issues linked in comments. It allows Information Disclosure...
CVE-2019-12434
CVE-2019-12434 affects GitLab Community and Enterprise Edition 10.6–11.11. An information-disclosure flaw allows an attacker to guess private project URL slugs by comparing destination URLs of issues linked in comments. The root cause is exposure through comment-linked issue destinations, enablin...
CVE-2019-12434
Removed by vendor...
CVE-2019-12433
Removed by vendor...
GitLab Access Control Error Vulnerability (CNVD-2020-16706)
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is the GitLab Enterprise Edition and GitLab CE is the GitLab Community Edition. An access...
