Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
stacksmashing vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2022-1162
A hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP, SAML) in GitLab CE/EE versions 14.7 before 14.7.7, 14.8 before 14.8.5, and 14.9 before 14.9.2 allowing malicious users to potentially take over accounts
Gitlab Gitlab
3 Github repositories
1 Article
6.1
CVSSv3
CVE-2022-1175
Improper neutralization of user input in GitLab CE/EE versions 14.4 prior to 14.7.7, all versions starting from 14.8 prior to 14.8.5, all versions starting from 14.9 prior to 14.9.2 allowed an malicious user to exploit XSS by injecting HTML in notes.
Gitlab Gitlab
1 Github repository
1 Article
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypass
CVE-2024-30051
remote
CVE-2024-27954
CVE-2023-51483
CVE-2023-47782
SSRF
CVE-2024-24715
CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started