CVE-2020-35236

The GitLab Webhook Handler in amazee.io Lagoon before 1.12.3 has incorrect access control associated with project deletion...

CVE-2020-35236

The GitLab Webhook Handler in amazee.io Lagoon before 1.12.3 has incorrect access control associated with project deletion...

Arbitrary file deletion

The GitLab Webhook Handler in amazee.io Lagoon before 1.12.3 has incorrect access control associated with project deletion...

CVE-2020-35236

The GitLab Webhook Handler in amazee.io Lagoon before 1.12.3 has incorrect access control associated with project deletion...

CVE-2020-35236

The CVE-2020-35236 entry concerns the GitLab Webhook Handler in amazee.io Lagoon prior to version 1.12.3, which has incorrect access control related to project deletion. The vulnerability stems from insufficient authorization checks in the webhook handler, potentially allowing unauthorized projec...

CVE-2020-35236

The GitLab Webhook Handler in amazee.io Lagoon before 1.12.3 has incorrect access control associated with project deletion...

PT-2020-17296

Name of the Vulnerable Software and Affected Versions amazee.io Lagoon versions prior to 1.12.3 Description The issue is related to incorrect access control in the GitLab Webhook Handler, which is associated with project deletion. Recommendations For versions prior to 1.12.3, update to version...

Amazee Lagoon Access Control Error Vulnerability

Amazee Lagoon is a rapid delivery platform for OpenShift and Kubernetes from Amazee. A security vulnerability exists in Amazee Lagoon versions prior to 1.12.3 that stems from incorrect access control and project deletion in the GitLab Webhook Handler...

CVE-2020-35236: Undefined Security Weakness

The GitLab Webhook Handler in amazee.io Lagoon before 1.12.3 has incorrect access control associated with project deletion...

Man in the middle using LoadBalancer or ExternalIPs

CVSS Rating: Medium CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L This issue affects multitenant clusters. If a potential attacker can already create or edit services and pods, then they may be able to intercept traffic from other pods or nodes in the cluster. An attacker that is able to create a...

Malicious Package

Overview The package discord.dll contained malicious code. The package ran a postinstall script that exfiltrated local files such as browser local databases. The information was exfiltrated to a remote Discord webhook. Recommendation Remove the package from your system and rotate any credentials...

CVE-2020-13306

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Webhook feature could be abused to perform denial of service attacks due to the lack of rate limitation...

CVE-2020-13306

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Webhook feature could be abused to perform denial of service attacks due to the lack of rate limitation...

Design/Logic Flaw

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Webhook feature could be abused to perform denial of service attacks due to the lack of rate limitation...

UBUNTU-CVE-2020-13306

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Webhook feature could be abused to perform denial of service attacks due to the lack of rate limitation...

CVE-2020-13306

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Webhook feature could be abused to perform denial of service attacks due to the lack of rate limitation...

CVE-2020-13306

GitLab CVE-2020-13306 affects GitLab versions before 13.1.10, 13.2.8 and 13.3.4, where the Webhook feature could be abused due to lack of rate limiting, enabling denial-of-service. The connected sources consistently describe this vulnerability in the Webhook component and its impact on availabili...

CVE-2020-13306

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Webhook feature could be abused to perform denial of service attacks due to the lack of rate limitation...

PT-2020-13447 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 13.1.10 GitLab versions prior to 13.2.8 GitLab versions prior to 13.3.4 Description: A denial of service attack can be performed due to the lack of rate limitation in the GitLab Webhook feature. Recommendations: For...

CVE-2020-13306: Allocation of Resources Without Limits or Throttling

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Webhook feature could be abused to perform denial of service attacks due to the lack of rate limitation...