https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:14:38.893892+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2022-3870 BIT-gitlab-2022-3870 2026-10-03T17:14:38.898898+00:00

Affected: Bitnami: gitlab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. GitLab allows unauthenticated users to download user avatars using the victim's user ID, on private instances that restrict public level visibility.

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0013 certfr-2023-avi-0013 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-03T17:14:38.898952+00:00 certfr-2023-avi-0013 https://cve.radiocsirt.org/vuln/euvd-2026-227889 EUVD-2026-227889 2026-10-03T17:14:38.898973+00:00 EUVD-2026-227889 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3870 fkie_cve-2022-3870 2026-10-03T17:14:38.898985+00:00

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. GitLab allows unauthenticated users to download user avatars using the victim's user ID, on private instances that restrict public level visibility.

 https://cve.radiocsirt.org/vuln/ghsa-5jj4-fh62-42vp GHSA-5jj4-fh62-42vp 2026-10-03T17:14:38.899009+00:00

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. GitLab allows unauthenticated users to download user avatars using the victim's user ID, on private instances that restrict public level visibility.

 https://cve.radiocsirt.org/vuln/gsd-2022-3870 gsd-2022-3870 2026-10-03T17:14:38.899025+00:00 gsd-2022-3870 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-3870 UBUNTU-CVE-2022-3870 2026-10-03T17:14:38.899035+00:00

Affected: Ubuntu:16.04:LTS: gitlab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. GitLab allows unauthenticated users to download user avatars using the victim's user ID, on private instances that restrict public level visibility.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0041 WID-SEC-W-2023-0041 — GitLab: Mehrere Schwachstellen 2026-10-03T17:14:38.899054+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.