https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:15:37 +0000 https://cve.radiocsirt.org/vuln/bit-gitlab-2023-0508 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. Open redirection was possible via HTTP response splitting in the NPM package API.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. Open redirection was possible via HTTP response splitting in the NPM package API.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2023-0508 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0436 certfr-2023-avi-0436 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0436 https://cve.radiocsirt.org/vuln/euvd-2026-209355 EUVD-2026-209355 https://cve.radiocsirt.org/vuln/euvd-2026-209355 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0508 <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. Open redirection was possible via HTTP response splitting in the NPM package API.</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. Open redirection was possible via HTTP response splitting in the NPM package API.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-0508 https://cve.radiocsirt.org/vuln/ghsa-qx55-2cp2-7ppq <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. Open redirection was possible via HTTP response splitting in the NPM package API.</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. Open redirection was possible via HTTP response splitting in the NPM package API.</p> https://cve.radiocsirt.org/vuln/ghsa-qx55-2cp2-7ppq https://cve.radiocsirt.org/vuln/gsd-2023-0508 gsd-2023-0508 https://cve.radiocsirt.org/vuln/gsd-2023-0508 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-0508 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. Open redirection was possible via HTTP response splitting in the NPM package API.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. Open redirection was possible via HTTP response splitting in the NPM package API.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-0508 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1370 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um seine Rechte zu erweitern, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um seine Rechte zu erweitern, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1370