https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:56:45.459246+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2023-3500 BIT-gitlab-2023-3500 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab 2026-10-04T17:56:45.553253+00:00

Affected: Bitnami: gitlab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A reflected XSS was possible when creating specific PlantUML diagrams that allowed the attacker to perform arbitrary actions on behalf of victims.

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0610 certfr-2023-avi-0610 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-04T17:56:45.553309+00:00 certfr-2023-avi-0610 https://cve.radiocsirt.org/vuln/euvd-2026-261380 EUVD-2026-261380 2026-10-04T17:56:45.553330+00:00 EUVD-2026-261380 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3500 fkie_cve-2023-3500 2026-10-04T17:56:45.553343+00:00

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A reflected XSS was possible when creating specific PlantUML diagrams that allowed the attacker to perform arbitrary actions on behalf of victims.

 https://cve.radiocsirt.org/vuln/ghsa-xgmj-r659-f4c7 GHSA-xgmj-r659-f4c7 2026-10-04T17:56:45.553367+00:00

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A reflected XSS was possible when creating specific PlantUML diagrams that allowed the attacker to perform arbitrary actions on behalf of victims.

 https://cve.radiocsirt.org/vuln/gsd-2023-3500 gsd-2023-3500 2026-10-04T17:56:45.553383+00:00 gsd-2023-3500 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-3500 UBUNTU-CVE-2023-3500 2026-10-04T17:56:45.553395+00:00

Affected: Ubuntu:16.04:LTS: gitlab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A reflected XSS was possible when creating specific PlantUML diagrams that allowed the attacker to perform arbitrary actions on behalf of victims.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1945 WID-SEC-W-2023-1945 — GitLab: Mehrere Schwachstellen 2026-10-04T17:56:45.553414+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in GitLab ausnutzen, um einen Denial-of-Service-Zustand zu verursachen, einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen preiszugeben, Dateien zu manipulieren oder beliebigen Code auszuführen.