https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:38:55 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-14459 bdu:2025-14459 https://cve.radiocsirt.org/vuln/bdu:2025-14459 https://cve.radiocsirt.org/vuln/bit-gitlab-2025-11990 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2025-11990 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1002 certfr-2025-avi-1002 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1002 https://cve.radiocsirt.org/vuln/euvd-2026-261116 EUVD-2026-261116 https://cve.radiocsirt.org/vuln/euvd-2026-261116 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11990 <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-11990 https://cve.radiocsirt.org/vuln/ghsa-cf8f-2f35-r5wx <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.</p> https://cve.radiocsirt.org/vuln/ghsa-cf8f-2f35-r5wx https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-11990 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-11990 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2587 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Cross-Site-Scripting-Angriffe durchzuführen, vertrauliche Informationen offenzulegen, die Authentifizierung zu umgehen, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Cross-Site-Scripting-Angriffe durchzuführen, vertrauliche Informationen offenzulegen, die Authentifizierung zu umgehen, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2587