https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:56:12 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-06159 bdu:2024-06159 https://cve.radiocsirt.org/vuln/bdu:2024-06159 https://cve.radiocsirt.org/vuln/bit-gitlab-2024-3035 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>A permission check vulnerability in GitLab CE/EE affecting all versions starting from 8.12 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2 allowed for LFS tokens to read and write to the user owned repositories.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>A permission check vulnerability in GitLab CE/EE affecting all versions starting from 8.12 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2 allowed for LFS tokens to read and write to the user owned repositories.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2024-3035 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0659 certfr-2024-avi-0659 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0659 https://cve.radiocsirt.org/vuln/euvd-2026-186056 EUVD-2026-186056 https://cve.radiocsirt.org/vuln/euvd-2026-186056 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3035 <p>A permission check vulnerability in GitLab CE/EE affecting all versions starting from 8.12 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2 allowed for LFS tokens to read and write to the user owned repositories.</p> <p>A permission check vulnerability in GitLab CE/EE affecting all versions starting from 8.12 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2 allowed for LFS tokens to read and write to the user owned repositories.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-3035 https://cve.radiocsirt.org/vuln/ghsa-rvj3-54w6-vrw6 <p>A permission check vulnerability in GitLab CE/EE affecting all versions starting from 8.12 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2 allowed for LFS tokens to read and write to the user owned repositories.</p> <p>A permission check vulnerability in GitLab CE/EE affecting all versions starting from 8.12 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2 allowed for LFS tokens to read and write to the user owned repositories.</p> https://cve.radiocsirt.org/vuln/ghsa-rvj3-54w6-vrw6 https://cve.radiocsirt.org/vuln/gsd-2024-3035 gsd-2024-3035 https://cve.radiocsirt.org/vuln/gsd-2024-3035 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3035 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>A permission check vulnerability in GitLab CE/EE affecting all versions starting from 8.12 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2 allowed for LFS tokens to read and write to the user owned repositories.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>A permission check vulnerability in GitLab CE/EE affecting all versions starting from 8.12 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2 allowed for LFS tokens to read and write to the user owned repositories.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3035 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1787 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1787