https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:07:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-01677 bdu:2024-01677 https://cve.radiocsirt.org/vuln/bdu:2024-01677 https://cve.radiocsirt.org/vuln/bit-gitlab-2024-1525 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. Under some specialized conditions, an LDAP user may be able to reset their password using their verified secondary email address and sign-in using direct authentication with the reset password, bypassing LDAP.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. Under some specialized conditions, an LDAP user may be able to reset their password using their verified secondary email address and sign-in using direct authentication with the reset password, bypassing LDAP.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2024-1525 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0155 certfr-2024-avi-0155 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0155 https://cve.radiocsirt.org/vuln/euvd-2026-323713 EUVD-2026-323713 https://cve.radiocsirt.org/vuln/euvd-2026-323713 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1525 <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. Under some specialized conditions, an LDAP user may be able to reset their password using their verified secondary email address and sign-in using direct authentication with the reset password, bypassing LDAP.</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. Under some specialized conditions, an LDAP user may be able to reset their password using their verified secondary email address and sign-in using direct authentication with the reset password, bypassing LDAP.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-1525 https://cve.radiocsirt.org/vuln/ghsa-2v36-29xm-jp89 <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. Under some specialized conditions, an LDAP user may be able to reset their password using their verified secondary email address and sign-in using direct authentication with the reset password, bypassing LDAP.</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. Under some specialized conditions, an LDAP user may be able to reset their password using their verified secondary email address and sign-in using direct authentication with the reset password, bypassing LDAP.</p> https://cve.radiocsirt.org/vuln/ghsa-2v36-29xm-jp89 https://cve.radiocsirt.org/vuln/gsd-2024-1525 gsd-2024-1525 https://cve.radiocsirt.org/vuln/gsd-2024-1525 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-1525 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. Under some specialized conditions, an LDAP user may be able to reset their password using their verified secondary email address and sign-in using direct authentication with the reset password, bypassing LDAP.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. Under some specialized conditions, an LDAP user may be able to reset their password using their verified secondary email address and sign-in using direct authentication with the reset password, bypassing LDAP.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-1525 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0460 <p>Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, seine Privilegien zu erweitern oder einen Cross-Site-Scripting (XSS)-Angriff durchzuführen.</p> <p>Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, seine Privilegien zu erweitern oder einen Cross-Site-Scripting (XSS)-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0460