Visit Website →

Recent Items

CERTFR-2024-AVI-0862 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo…

CERTFR-2024-AVI-0862

bdu:2024-07988

bdu:2024-07988

BIT-gitlab-2024-9164 — Missing Authentication for Critical Function in GitLab

Affected: Bitnami: gitlab

An issue was discovered in GitLab EE affecting all versions starting from 12.5 prior to 17.2.9, starting from 17.3, prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows running pipelines on arbitrary branches.

fkie_cve-2024-9164

An issue was discovered in GitLab EE affecting all versions starting from 12.5 prior to 17.2.9, starting from 17.3, prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows running pipelines on arbitrary branches.

GHSA-xc4q-wvjc-4v56

An issue was discovered in GitLab EE affecting all versions starting from 12.5 prior to 17.2.9, starting from 17.3, prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows running pipelines on arbitrary branches.

NCSC-2024-0406 — Kwetsbaarheden verholpen in Gitlab Enterprise Edition en Community Edition

NCSC-2024-0406

UBUNTU-CVE-2024-9164

Affected: Ubuntu:16.04:LTS: gitlab

An issue was discovered in GitLab EE affecting all versions starting from 12.5 prior to 17.2.9, starting from 17.3, prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows running pipelines on arbitrary branches.

WID-SEC-W-2024-3136 — GitLab: Mehrere Schwachstellen

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um erhöhte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu erzeugen, einen Cross-Site-Scripting-Angriff durchzuführen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.