https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:17:50 +0000 https://cve.radiocsirt.org/vuln/bit-gitlab-2023-1965 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Lack of verification on RelayState parameter allowed a maliciously crafted URL to obtain access tokens granted for 3rd party Group SAML SSO logins. This feature isn&#39;t enabled by default.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Lack of verification on RelayState parameter allowed a maliciously crafted URL to obtain access tokens granted for 3rd party Group SAML SSO logins. This feature isn&#39;t enabled by default.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2023-1965 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0351 certfr-2023-avi-0351 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0351 https://cve.radiocsirt.org/vuln/euvd-2026-212698 EUVD-2026-212698 https://cve.radiocsirt.org/vuln/euvd-2026-212698 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1965 <p>An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Lack of verification on RelayState parameter allowed a maliciously crafted URL to obtain access tokens granted for 3rd party Group SAML SSO logins. This feature isn&#39;t enabled by default.</p> <p>An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Lack of verification on RelayState parameter allowed a maliciously crafted URL to obtain access tokens granted for 3rd party Group SAML SSO logins. This feature isn&#39;t enabled by default.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-1965 https://cve.radiocsirt.org/vuln/ghsa-cxfp-vwqp-ghxf <p>An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Lack of verification on RelayState parameter allowed a maliciously crafted URL to obtain access tokens granted for 3rd party Group SAML SSO logins. This feature isn&#39;t enabled by default.</p> <p>An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Lack of verification on RelayState parameter allowed a maliciously crafted URL to obtain access tokens granted for 3rd party Group SAML SSO logins. This feature isn&#39;t enabled by default.</p> https://cve.radiocsirt.org/vuln/ghsa-cxfp-vwqp-ghxf https://cve.radiocsirt.org/vuln/gsd-2023-1965 gsd-2023-1965 https://cve.radiocsirt.org/vuln/gsd-2023-1965 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1130 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um seine Privilegien zu erweitern, Sicherheitsvorkehrungen zu umgehen, einen Cross Site Scripting Angriff durchzuführen und Informationen offenzulegen</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um seine Privilegien zu erweitern, Sicherheitsvorkehrungen zu umgehen, einen Cross Site Scripting Angriff durchzuführen und Informationen offenzulegen</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1130