761 matches found
CVE-2019-13001
Removed by vendor...
CVE-2019-13001
An issue was discovered in GitLab Community and Enterprise Edition 11.9 and later through 12.0.2. GitLab Snippets were vulnerable to an authorization issue that allowed unauthorized users to add comments to a private snippet. It allows authentication bypass...
CVE-2019-13001
GitLab Community and Enterprise Edition versions 11.9–12.0.2 are affected by an authorization flaw in GitLab Snippets that allowed unauthorized users to add comments to a private snippet, effectively bypassing authentication. The issue enables access to private snippet comments via network exploi...
PT-2020-9363
Name of the Vulnerable Software and Affected Versions: GitLab Community and Enterprise Edition versions 9.2 through 12.0.2 Description: The issue is related to improper permission settings, allowing unauthorized access to uploaded files associated with unsaved personal snippets. This is due to...
CVE-2019-13009: Uncontrolled Resource Consumption
An issue was discovered in GitLab Community and Enterprise Edition 9.2 through 12.0.2. Uploaded files associated with unsaved personal snippets were accessible to unauthorized users due to improper permission settings. It has Incorrect Access Control...
CVE-2019-13001: Incorrect Authorization
An issue was discovered in GitLab Community and Enterprise Edition 11.9 and later through 12.0.2. GitLab Snippets were vulnerable to an authorization issue that allowed unauthorized users to add comments to a private snippet. It allows authentication bypass...
PT-2020-9356
Name of the Vulnerable Software and Affected Versions: GitLab Community and Enterprise Edition versions 11.9 through 12.0.2 Description: An issue was discovered that allows unauthorized users to add comments to a private snippet due to an authorization issue in GitLab Snippets. This issue also...
PT-2020-1844
Name of the Vulnerable Software and Affected Versions Application Inspector versions v1.0.23 or earlier Description A remote code execution issue exists due to the tool reflecting example code snippets from third-party source files into its HTML output. This can be exploited by a remote attacker ...
Code Snippets Plugin for WordPress < 2.14.0 Cross-Site Request Forgery
The WordPress Code Snippets Plugin installed on the remote host is affected by a cross-site request forgery CSRF vulnerability that could lead to remote code execution. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version...
WordPress Code Snippets Cross-Site Request Forgery Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress plugin Code Snippets. An attacker can exploit the...
WordPress Code Snippets Plugin Cross Site Request Forgery (CVE-2020-8417)
A cross site request forgery vulnerability exists in WordPress Code Snippets plugin. Successful exploitation of this vulnerability can result in the execution of arbitrary code on the affected system...
200K WordPress Sites Vulnerable to Plugin Flaw
A high-severity vulnerability exists in a popular WordPress plugin, potentially opening up 200,000 websites to takeover. The WordPress plugin in question in Code Snippets, which allows users to run small chunks of PHP code on their websites. This can be used to extend the functionality of the...
Code Snippets < 2.14.0 - CSRF to RCE
This "flaw allowed anybody to forge a request on behalf of an administrator and inject executable code on a vulnerable site." PoC...
WordPress Code Snippets plugin <= 2.13.3 - Cross-Site Request Forgery (CSRF) to Remote Code Execution (RCE) vulnerability
Cross-Site Request Forgery CSRF to Remote Code Execution RCE vulnerability found by Chloe Chamberland in WordPress Code Snippets plugin versions = 2.13.3. Solution Update the WordPress Code Snippets plugin to the latest available version at least 2.14.0...
CVE-2020-8417
The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu...
CVE-2020-8417
The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu...
Cross site request forgery (csrf)
The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu...
CVE-2020-8417
The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu...