https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:14:37 +0000 https://cve.radiocsirt.org/vuln/bit-gitlab-2022-3870 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. GitLab allows unauthenticated users to download user avatars using the victim&#39;s user ID, on private instances that restrict public level visibility.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. GitLab allows unauthenticated users to download user avatars using the victim&#39;s user ID, on private instances that restrict public level visibility.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2022-3870 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0013 certfr-2023-avi-0013 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0013 https://cve.radiocsirt.org/vuln/euvd-2026-227889 EUVD-2026-227889 https://cve.radiocsirt.org/vuln/euvd-2026-227889 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3870 <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. GitLab allows unauthenticated users to download user avatars using the victim&#39;s user ID, on private instances that restrict public level visibility.</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. GitLab allows unauthenticated users to download user avatars using the victim&#39;s user ID, on private instances that restrict public level visibility.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-3870 https://cve.radiocsirt.org/vuln/ghsa-5jj4-fh62-42vp <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. GitLab allows unauthenticated users to download user avatars using the victim&#39;s user ID, on private instances that restrict public level visibility.</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. GitLab allows unauthenticated users to download user avatars using the victim&#39;s user ID, on private instances that restrict public level visibility.</p> https://cve.radiocsirt.org/vuln/ghsa-5jj4-fh62-42vp https://cve.radiocsirt.org/vuln/gsd-2022-3870 gsd-2022-3870 https://cve.radiocsirt.org/vuln/gsd-2022-3870 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-3870 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. GitLab allows unauthenticated users to download user avatars using the victim&#39;s user ID, on private instances that restrict public level visibility.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. GitLab allows unauthenticated users to download user avatars using the victim&#39;s user ID, on private instances that restrict public level visibility.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-3870 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0041 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0041