Lucene search
K

8 matches found

OSV
OSV
added 2024/03/06 10:56 a.m.21 views

BIT-GITLAB-2023-5512 Improper Control of Generation of Code ('Code Injection') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML encoding is used for file names leading for incorrect...

5.7CVSS5.2AI score0.00296EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/02/13 12:0 a.m.1 views

PT-2024-1650 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks...

7.6CVSS9.3AI score0.0083EPSS
Exploits0References5
Veracode
Veracode
added 2023/12/26 2:27 a.m.16 views

Code Injection

Gitlab is vulnerable to Code Injection. The vulnerability is caused due to lack of validation of file names. An attacker can inject code which can alter the representation of the UI...

5.7CVSS6.9AI score0.00296EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2023/12/15 4:15 p.m.14 views

CVE-2023-5512

An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML encoding is used for file names leading for incorrect...

5.7CVSS0.00296EPSS
Exploits0References2
Prion
Prion
added 2023/12/15 4:15 p.m.12 views

Design/Logic Flaw

An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML encoding is used for file names leading for incorrect...

3.5CVSS6.5AI score0.00296EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/12/15 4:3 p.m.19 views

CVE-2023-5512 Improper Control of Generation of Code ('Code Injection') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML encoding is used for file names leading for incorrect...

4.8CVSS5.9AI score0.00296EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2023/12/15 4:3 p.m.14 views

CVE-2023-5512

Removed by vendor...

5.7CVSS6.2AI score0.00296EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2020/11/10 12:0 a.m.1 views

PT-2020-4773 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Microsoft Office. It may allow a remote attacker to conduct spoofing attacks...

6.8CVSS6.3AI score0.01445EPSS
Exploits0References5
Rows per page
Query Builder