https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:53:35.357401+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2023-1167 BIT-gitlab-2023-1167 2026-10-04T04:53:35.361510+00:00

Affected: Bitnami: gitlab

Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 allows an unauthorized access to security reports in MR.

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0275 certfr-2023-avi-0275 — De multiples vulnérabilités ont été découvertes dans <span class="textit">GitLab</span>. Elles permettent à un attaquan… 2026-10-04T04:53:35.361558+00:00 certfr-2023-avi-0275 https://cve.radiocsirt.org/vuln/euvd-2026-214466 EUVD-2026-214466 2026-10-04T04:53:35.361578+00:00 EUVD-2026-214466 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1167 fkie_cve-2023-1167 2026-10-04T04:53:35.361590+00:00

Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 allows an unauthorized access to security reports in MR.

 https://cve.radiocsirt.org/vuln/ghsa-7g53-7whp-2hm3 GHSA-7g53-7whp-2hm3 2026-10-04T04:53:35.361611+00:00

Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 allows an unauthorized access to security reports in MR.

 https://cve.radiocsirt.org/vuln/gsd-2023-1167 gsd-2023-1167 2026-10-04T04:53:35.361625+00:00 gsd-2023-1167 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0812 WID-SEC-W-2023-0812 — GitLab: Mehrere Schwachstellen 2026-10-04T04:53:35.361635+00:00

Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.