https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 09:31:29 +0000 https://cve.radiocsirt.org/vuln/bit-gitlab-2023-3906 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An input validation issue in the asset proxy in GitLab EE, affecting all versions from 12.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1, allowed an authenticated attacker to craft image urls which bypass the asset proxy.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An input validation issue in the asset proxy in GitLab EE, affecting all versions from 12.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1, allowed an authenticated attacker to craft image urls which bypass the asset proxy.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2023-3906 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0792 certfr-2023-avi-0792 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0792 https://cve.radiocsirt.org/vuln/euvd-2026-352386 EUVD-2026-352386 https://cve.radiocsirt.org/vuln/euvd-2026-352386 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3906 <p>An input validation issue in the asset proxy in GitLab EE, affecting all versions from 12.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1, allowed an authenticated attacker to craft image urls which bypass the asset proxy.</p> <p>An input validation issue in the asset proxy in GitLab EE, affecting all versions from 12.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1, allowed an authenticated attacker to craft image urls which bypass the asset proxy.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-3906 https://cve.radiocsirt.org/vuln/ghsa-x2v6-6q9m-6qx9 <p>An input validation issue in the asset proxy in GitLab EE, affecting all versions from 12.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1, allowed an authenticated attacker to craft image urls which bypass the asset proxy.</p> <p>An input validation issue in the asset proxy in GitLab EE, affecting all versions from 12.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1, allowed an authenticated attacker to craft image urls which bypass the asset proxy.</p> https://cve.radiocsirt.org/vuln/ghsa-x2v6-6q9m-6qx9 https://cve.radiocsirt.org/vuln/gsd-2023-3906 gsd-2023-3906 https://cve.radiocsirt.org/vuln/gsd-2023-3906 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2520 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um beliebigen Programmcode mit Rechten des Benutzers auszuführen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder Dateien zu manipulieren.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um beliebigen Programmcode mit Rechten des Benutzers auszuführen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2520