Archive
17 November 2020
Vulnerabilities first published on this day (UTC), newest first.
7 results · Clear filters · Feed
-
Medium 4.3
An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a …
-
Medium 5.7
An issue has been discovered in GitLab EE affecting all versions starting from 10.2. Required CODEOWNERS approval could…
-
Medium 6.5
Insufficient permission checks in scheduled pipeline API in GitLab CE/EE 13.0+ allows an attacker to read variable name…
-
Medium 4.8
Cross-site Scripting in keycloak
A flaw was found in Keycloak before version 12.0.0, where it is possible to add unsafe schemes for the redirect_uri parameter. This flaw allows an attacker to perform a Cross-site scripting attack.
-
Medium 4.3
A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 12.6. The container registry name ch…
-
Medium 4.7
A vulnerability in the internal Kubernetes agent api in GitLab CE/EE version 13.3 and above allows unauthorized access …
-
Medium 5.3
Certain SAST CiConfiguration information could be viewed by unauthorized users in GitLab EE starting with 13.3. This in…