https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:21:59 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-05388 bdu:2025-05388 https://cve.radiocsirt.org/vuln/bdu:2025-05388 https://cve.radiocsirt.org/vuln/bit-gitlab-2024-3303 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior to 17.8.2, which allows an attacker to exfiltrate contents of a private issue using prompt injection.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior to 17.8.2, which allows an attacker to exfiltrate contents of a private issue using prompt injection.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2024-3303 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0123 certfr-2025-avi-0123 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0123 https://cve.radiocsirt.org/vuln/euvd-2026-215412 EUVD-2026-215412 https://cve.radiocsirt.org/vuln/euvd-2026-215412 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3303 <p>An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior to 17.8.2, which allows an attacker to exfiltrate contents of a private issue using prompt injection.</p> <p>An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior to 17.8.2, which allows an attacker to exfiltrate contents of a private issue using prompt injection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-3303 https://cve.radiocsirt.org/vuln/ghsa-8572-xjmw-7fq3 <p>An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior to 17.8.2, which allows an attacker to exfiltrate contents of a private issue using prompt injection.</p> <p>An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior to 17.8.2, which allows an attacker to exfiltrate contents of a private issue using prompt injection.</p> https://cve.radiocsirt.org/vuln/ghsa-8572-xjmw-7fq3 https://cve.radiocsirt.org/vuln/gsd-2024-3303 gsd-2024-3303 https://cve.radiocsirt.org/vuln/gsd-2024-3303 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3303 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior to 17.8.2, which allows an attacker to exfiltrate contents of a private issue using prompt injection.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior to 17.8.2, which allows an attacker to exfiltrate contents of a private issue using prompt injection.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3303 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0354 <p>Ein entfernter authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Cross-Site-Scripting-Angriffe durchzuführen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, erhöhte Berechtigungen zu erlangen und Daten zu manipulieren.</p> <p>Ein entfernter authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Cross-Site-Scripting-Angriffe durchzuführen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, erhöhte Berechtigungen zu erlangen und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0354