Skip to content
OpenAdvisories

Archive

11 July 2024

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Low 2.7

    Improper Access Control in GitLab

    An issue was discovered in GitLab CE/EE affecting all versions starting from 16.5 prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2 in which a user with `admin_group_member` custom role permission could ban group mem…

  • Low 3.8

    Improper Access Control in GitLab

    An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Guest user with `admin_push_rules` permission may have been able to create project-level deploy tokens.

  • Low 3.3

    Improper output Neutralization for Logs (CWE-117) in the Command Centre API Diagnostics Endpoint could allow an attacke…