Malicious code in @onum-releases/api-client (npm)

Source: amazon-inspector 07908d7f0abe458955357ed6814b46c090c70e1b3d34be4dd1a5c02d2507127d On require, index.js reads os.hostname, embeds it as a subdomain label under a Burp Collaborator oastify.com host, and issues an https.get to that host index.js lines 4-7: 'var host = 'api-client.' + h +...

Linux Distros Unpatched Vulnerability : CVE-2024-9387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GitLab CE/EE affecting all versions from 11.8 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. An attacker could potentiall...

BIT-GITLAB-2024-9387 URL Redirection to Untrusted Site ('Open Redirect') in GitLab

An issue was discovered in GitLab CE/EE affecting all versions from 11.8 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. An attacker could potentially perform an open redirect against a given releases API endpoint...

CVE-2024-9387

An issue was discovered in GitLab CE/EE affecting all versions from 11.8 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. An attacker could potentially perform an open redirect against a given releases API endpoint...

CVE-2024-9387

CVE-2024-9387 affects GitLab CE/EE, impacting all versions before 17.4.6 (11.8–17.4.5), before 17.5.4, and before 17.6.2. The issue is an open redirect vulnerability in a releases API endpoint that could misuse redirects. According to the sources, fixes are provided in GitLab releases: 17.4.6, 17...

CVE-2024-9387: URL Redirection to Untrusted Site

An issue was discovered in GitLab CE/EE affecting all versions from 11.8 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. An attacker could potentially perform an open redirect against a given releases API endpoint...