https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:20:50 +0000 https://cve.radiocsirt.org/vuln/bit-gitlab-2022-4289 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue has been discovered in GitLab affecting all versions starting from 15.3 before 15.7.8, versions of 15.8 before 15.8.4, and version 15.9 before 15.9.2. Google IAP details in Prometheus integration were not hidden, could be leaked from instance, group, or project settings to other users.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue has been discovered in GitLab affecting all versions starting from 15.3 before 15.7.8, versions of 15.8 before 15.8.4, and version 15.9 before 15.9.2. Google IAP details in Prometheus integration were not hidden, could be leaked from instance, group, or project settings to other users.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2022-4289 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0187 certfr-2023-avi-0187 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0187 https://cve.radiocsirt.org/vuln/euvd-2026-12727 EUVD-2026-12727 https://cve.radiocsirt.org/vuln/euvd-2026-12727 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4289 <p>An issue has been discovered in GitLab affecting all versions starting from 15.3 before 15.7.8, versions of 15.8 before 15.8.4, and version 15.9 before 15.9.2. Google IAP details in Prometheus integration were not hidden, could be leaked from instance, group, or project settings to other users.</p> <p>An issue has been discovered in GitLab affecting all versions starting from 15.3 before 15.7.8, versions of 15.8 before 15.8.4, and version 15.9 before 15.9.2. Google IAP details in Prometheus integration were not hidden, could be leaked from instance, group, or project settings to other users.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-4289 https://cve.radiocsirt.org/vuln/ghsa-v68j-qxmr-9486 <p>An issue has been discovered in GitLab affecting all versions starting from 15.3 before 15.7.8, versions of 15.8 before 15.8.4, and version 15.9 before 15.9.2. Google IAP details in Prometheus integration were not hidden, could be leaked from instance, group, or project settings to other users.</p> <p>An issue has been discovered in GitLab affecting all versions starting from 15.3 before 15.7.8, versions of 15.8 before 15.8.4, and version 15.9 before 15.9.2. Google IAP details in Prometheus integration were not hidden, could be leaked from instance, group, or project settings to other users.</p> https://cve.radiocsirt.org/vuln/ghsa-v68j-qxmr-9486 https://cve.radiocsirt.org/vuln/gsd-2022-4289 gsd-2022-4289 https://cve.radiocsirt.org/vuln/gsd-2022-4289 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-4289 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An issue has been discovered in GitLab affecting all versions starting from 15.3 before 15.7.8, versions of 15.8 before 15.8.4, and version 15.9 before 15.9.2. Google IAP details in Prometheus integration were not hidden, could be leaked from instance, group, or project settings to other users.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An issue has been discovered in GitLab affecting all versions starting from 15.3 before 15.7.8, versions of 15.8 before 15.8.4, and version 15.9 before 15.9.2. Google IAP details in Prometheus integration were not hidden, could be leaked from instance, group, or project settings to other users.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-4289 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0564 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder sonstige Auswirkungen zu verursachen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder sonstige Auswirkungen zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0564