2233 matches found
CVE-2021-22178
An issue has been discovered in GitLab affecting all versions starting from 13.2. Gitlab was vulnerable to SRRF attack through the Prometheus integration...
CVE-2021-22178
Removed by vendor...
CVE-2021-22178
An issue has been discovered in GitLab affecting all versions starting from 13.2. Gitlab was vulnerable to SRRF attack through the Prometheus integration...
CVE-2021-22178
Summary: CVE-2021-22178 affects GitLab versions starting from 13.2 and earlier, due to a SRRF attack via the Prometheus integration. The connected sources consistently describe this as a vulnerability in GitLab exposing potential risks when Prometheus is enabled, but do not provide vendor-specifi...
CVE-2021-22178
An issue has been discovered in GitLab affecting all versions starting from 13.2. Gitlab was vulnerable to SRRF attack through the Prometheus integration...
CVE-2021-22178: Server-Side Request Forgery (SSRF)
An issue has been discovered in GitLab affecting all versions starting from 13.2. Gitlab was vulnerable to SRRF attack through the Prometheus integration...
PT-2021-14890 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 13.2 and later Description: An issue has been discovered in GitLab, making it vulnerable to a Server-Side Request Forgery SRRF attack through the Prometheus integration. Recommendations: For GitLab versions 13.2 and later, at...
GitLab code issues and vulnerabilities
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. GitLab suffers from a server-side request forgery vulnerability that can be exploited via Prometheu...
prometheus:fuzzParseOpenMetric: Segv on unknown address with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6439772563308544 Project: prometheus Fuzzing Engine: libFuzzer Fuzz Target: fuzzParseOpenMetric Job Type: libfuzzerasanprometheus Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Cras...
Gitlab -- Multiple Vulnerabilities
Gitlab reports: Improper Certificate Validation for Fortinet OTP Denial of Service Attack on gitlab-shell Resource exhaustion due to pending jobs Confidential issue titles were exposed Improper access control allowed demoted project members to access authored merge requests Improper access contro...
CentOS 8 : prometheus-jmx-exporter (CESA-2020:4807)
The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:4807 advisory. - snakeyaml: Billion laughs attack via alias feature CVE-2017-18640 Note that Nessus has not tested for this issue but has instead relied only on the...
CVE-2021-22166
An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method...
CVE-2021-22166
An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method...
UBUNTU-CVE-2021-22166
An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method...
Default configuration
An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method...
CVE-2021-22166
An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method...
CVE-2021-22166
An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method...
CVE-2021-22166
Removed by vendor...
CVE-2021-22166
CVE-2021-22166 affects GitLab 13.7+ where an attacker could trigger a Prometheus denial of service by sending an HTTP request with a malformed method. The linked advisories describe the issue as mitigated in GitLab version 13.7.2 (and related fixes) and outline remediation guidance. The initial a...