https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:57:29 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-00232 bdu:2024-00232 https://cve.radiocsirt.org/vuln/bdu:2024-00232 https://cve.radiocsirt.org/vuln/bit-gitlab-2023-6680 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows an attacker to authenticate as another user given their public key if they use Smartcard authentication. Smartcard authentication is an experimental feature and has to be manually enabled by an administrator.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows an attacker to authenticate as another user given their public key if they use Smartcard authentication. Smartcard authentication is an experimental feature and has to be manually enabled by an administrator.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2023-6680 https://cve.radiocsirt.org/vuln/certfr-2023-avi-1027 certfr-2023-avi-1027 https://cve.radiocsirt.org/vuln/certfr-2023-avi-1027 https://cve.radiocsirt.org/vuln/euvd-2026-325289 EUVD-2026-325289 https://cve.radiocsirt.org/vuln/euvd-2026-325289 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6680 <p>An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows an attacker to authenticate as another user given their public key if they use Smartcard authentication. Smartcard authentication is an experimental feature and has to be manually enabled by an administrator.</p> <p>An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows an attacker to authenticate as another user given their public key if they use Smartcard authentication. Smartcard authentication is an experimental feature and has to be manually enabled by an administrator.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-6680 https://cve.radiocsirt.org/vuln/ghsa-wpj8-2grx-f965 <p>An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows an attacker to authenticate as another user given their public key if they use Smartcard authentication. Smartcard authentication is an experimental feature and has to be manually enabled by an administrator.</p> <p>An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows an attacker to authenticate as another user given their public key if they use Smartcard authentication. Smartcard authentication is an experimental feature and has to be manually enabled by an administrator.</p> https://cve.radiocsirt.org/vuln/ghsa-wpj8-2grx-f965 https://cve.radiocsirt.org/vuln/gsd-2023-6680 gsd-2023-6680 https://cve.radiocsirt.org/vuln/gsd-2023-6680 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-6680 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows an attacker to authenticate as another user given their public key if they use Smartcard authentication. Smartcard authentication is an experimental feature and has to be manually enabled by an administrator.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows an attacker to authenticate as another user given their public key if they use Smartcard authentication. Smartcard authentication is an experimental feature and has to be manually enabled by an administrator.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-6680 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3153 <p>Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um seine Privilegien zu erweitern, einen Denial of Service zu verursachen, falsche Informationen darzustellen und Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um seine Privilegien zu erweitern, einen Denial of Service zu verursachen, falsche Informationen darzustellen und Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3153