deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-25637
Published: 2024-06-26
Description: October is a self-hosted CMS platform based on the Laravel PHP Framework. The X-October-Request-Handler Header does not sanitize the AJAX handler name and allows unescaped HTML to be reflected back. There is no impact since this vulnerability cannot be exploited through normal browser interactions. This unescaped value is only detectable when using a proxy interception tool. This issue has been patched in version 3.5.15.

CVSS Score: 3.1 (LOW)
CWE: CWE-79
References: https://github.com/octobercms/october/security/advisories/GHSA-rjw8-v7rr-r563; https://github.com/octobercms/october/security/advisories/GHSA-rjw8-v7rr-r563
CVE: CVE-2024-38271
Published: 2024-06-26
Description: There exists a vulnerability in Quick Share/Nearby, where an attacker can force a victim to stay connected to a temporary hotspot created for the sharing. As part of the sequence of packets in a Quick Share connection over Bluetooth, the attacker forces the victim to connect to the attacker’s WiFi network and then sends an OfflineFrame that crashes Quick Share.
This makes the Wifi connection to the attacker’s network last, instead of returning to the old network when the Quick Share session completes, allowing the attacker to be a MiTM. We recommend upgrading to version 1.0.1724.0 of Quick Share or above
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-404, CWE-404
References: https://github.com/google/nearby/pull/2402; https://github.com/google/nearby/pull/2433; https://github.com/google/nearby/pull/2435
CVE: CVE-2024-38272
Published: 2024-06-26
Description: There exists a vulnerability in Quick Share/Nearby, where an attacker can bypass the accept file dialog on Quick Share Windows. Normally in Quick Share Windows app we can't send a file without the user accept from the receiving device if the visibility is set to everyone mode or contacts mode. We recommend upgrading to version 1.0.1724.0 of Quick Share or above
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-294, CWE-294
References: https://github.com/google/nearby/pull/2402; https://github.com/google/nearby/pull/2589; https://github.com/google/nearby/pull/2402
CVE: CVE-2024-39458
Published: 2024-06-26
Description: When Jenkins Structs Plugin 337.v1b_04ea_4df7c8 and earlier fails to configure a build step, it logs a warning message containing diagnostic information that may contain secrets passed as step parameters, potentially resulting in accidental exposure of secrets through the default system log.
CVSS Score: 3.1 (LOW)
CWE: CWE-209
References: http://www.openwall.com/lists/oss-security/2024/06/26/2; https://www.jenkins.io/security/advisory/2024-06-26/#SECURITY-3371; http://www.openwall.com/lists/oss-security/2024/06/26/2
CVE: CVE-2024-39459
Published: 2024-06-26
Description: In rare cases Jenkins Plain Credentials Plugin 182.v468b_97b_9dcb_8 and earlier stores secret file credentials unencrypted (only Base64 encoded) on the Jenkins controller file system, where they can be viewed by users with access to the Jenkins controller file system (global credentials) or with Item/Extended Read permission (folder-scoped credentials).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-922
References: http://www.openwall.com/lists/oss-security/2024/06/26/2; https://www.jenkins.io/security/advisory/2024-06-26/#SECURITY-2495; http://www.openwall.com/lists/oss-security/2024/06/26/2
CVE: CVE-2024-39460
Published: 2024-06-26
Description: Jenkins Bitbucket Branch Source Plugin 886.v44cf5e4ecec5 and earlier prints the Bitbucket OAuth access token as part of the Bitbucket URL in the build log in some cases.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-532
References: http://www.openwall.com/lists/oss-security/2024/06/26/2; https://www.jenkins.io/security/advisory/2024-06-26/#SECURITY-3363; http://www.openwall.com/lists/oss-security/2024/06/26/2
CVE: CVE-2024-6354
Published: 2024-06-26
Description: Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard.
CVSS Score: 7.2 (HIGH)
CWE: CWE-1262
References: https://devolutions.net/security/advisories/DEVO-2024-0010; https://devolutions.net/security/advisories/DEVO-2024-0010
CVE: CVE-2024-35545
Published: 2024-06-26
Description: MAP-OS v4.45.0 and earlier was discovered to contain a cross-site scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/RamonSilva20/mapos/commit/3559bae4782162faab94670f503fd35b0f331929; https://github.com/RamonSilva20/mapos/tree/master; https://portswigger.net/web-security/cross-site-scripting/stored
CVE: CVE-2024-33326
Published: 2024-06-26
Description: A cross-site scripting (XSS) vulnerability in the component XsltResultControllerHtml.jsp of Lumisxp v15.0.x to v16.1.x allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the lumPageID parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2024/Jul/10; https://gist.github.com/rodnt/51ae2897abfff1bdcedccf72edbf3d24; http://seclists.org/fulldisclosure/2024/Jul/10
CVE: CVE-2024-33327
Published: 2024-06-26
Description: A cross-site scripting (XSS) vulnerability in the component UrlAccessibilityEvaluation.jsp of Lumisxp v15.0.x to v16.1.x allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contentHtml parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2024/Jul/9; https://gist.github.com/rodnt/c53d4c95bb6966f0a2cf381ae5089c79; http://seclists.org/fulldisclosure/2024/Jul/9
CVE: CVE-2024-33328
Published: 2024-06-26
Description: A cross-site scripting (XSS) vulnerability in the component main.jsp of Lumisxp v15.0.x to v16.1.x allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the pageId parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2024/Jul/8; https://gist.github.com/rodnt/cf2946b0f6136cd03ee4737aa72ae95b; http://seclists.org/fulldisclosure/2024/Jul/8
CVE: CVE-2024-33329
Published: 2024-06-26
Description: A hardcoded privileged ID within Lumisxp v15.0.x to v16.1.x allows attackers to bypass authentication and access internal pages and other sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: http://seclists.org/fulldisclosure/2024/Jul/7; https://gist.github.com/rodnt/f6b3a2ac875b8f13656063eefbfd9812; http://seclists.org/fulldisclosure/2024/Jul/7
CVE: CVE-2024-38375
Published: 2024-06-26
Description: @fastly/js-compute is a JavaScript SDK and runtime for building Fastly Compute applications. The implementation of several functions were determined to include a use-after-free bug. This bug could allow for unintended data loss if the result of the preceding functions were sent anywhere else, and often results in a guest trap causing services to return a 500. This bug has been fixed in version 3.16.0 of the `@fastly/js-compute` package.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416
References: https://github.com/fastly/js-compute-runtime/commit/4e16641ef4e159c4a11b500ac861b8fa8d9ff5d3; https://github.com/fastly/js-compute-runtime/security/advisories/GHSA-mp3g-vpm9-9vqv; https://github.com/fastly/js-compute-runtime/commit/4e16641ef4e159c4a11b500ac861b8fa8d9ff5d3
CVE: CVE-2024-38520
Published: 2024-06-26
Description: SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. When SoftEtherVPN is deployed with L2TP enabled on a device, it introduces the possibility of the host being used for amplification/reflection traffic generation because it will respond to every packet with two response packets that are larger than the request packet size. These sorts of techniques are used by external actors who generate spoofed source IPs to target a destination on the internet. This vulnerability has been patched in version 5.02.5185.

CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://github.com/SoftEtherVPN/SoftEtherVPN/commit/c2a7aa548137dc80c6aafdc645cf4dc34e0dc764; https://github.com/SoftEtherVPN/SoftEtherVPN/releases/tag/5.02.5185; https://github.com/SoftEtherVPN/SoftEtherVPN/security/advisories/GHSA-j35p-p8pj-vqxq
CVE: CVE-2023-26877
Published: 2024-06-26
Description: File upload vulnerability found in Softexpert Excellence Suite v.2.1 allows attackers to execute arbitrary code via a .php file upload to the form/efms_exec_html/file_upload_parser.php endpoint.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-94
References: https://gist.github.com/rodnt/90ac26fdf891e602f6f090d6aebce32d; https://gist.github.com/rodnt/90ac26fdf891e602f6f090d6aebce32d
CVE: CVE-2024-38527
Published: 2024-06-26
Description: ZenUML is JavaScript-based diagramming tool that requires no server, using Markdown-inspired text definitions and a renderer to create and modify sequence diagrams. Markdown-based comments in the ZenUML diagram syntax are susceptible to Cross-site Scripting (XSS). The comment feature allows the user to attach small notes for reference. This feature allows the user to enter in their comment in markdown comment, allowing them to use common markdown features, such as `**` for bolded text. However, the markdown text is currently not sanitized before rendering, allowing an attacker to enter a malicious payload for the comment which leads to XSS. This puts existing applications that use ZenUML unsandboxed at risk of arbitrary JavaScript execution when rendering user-controlled diagrams. This vulnerability was patched in version 3.23.25,
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/mermaid-js/zenuml-core/commit/ad7545b33f5f27466cbf357beb65969ca1953e3c; https://github.com/mermaid-js/zenuml-core/security/advisories/GHSA-q6xv-jm4v-349h; https://github.com/mermaid-js/zenuml-core/commit/ad7545b33f5f27466cbf357beb65969ca1953e3c
CVE: CVE-2024-38949
Published: 2024-06-26
Description: Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to display444as420 function at sdl.cc
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-122
References: https://github.com/strukturag/libde265/issues/460; https://github.com/zhangteng0526/CVE-information/blob/main/CVE-2024-38949; https://github.com/strukturag/libde265/issues/460
CVE: CVE-2024-38950
Published: 2024-06-26
Description: Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attackers to crash the application via crafted payload to __interceptor_memcpy function.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-122
References: https://github.com/strukturag/libde265/issues/460; https://github.com/zhangteng0526/CVE-information/blob/main/CVE-2024-38950; https://github.com/strukturag/libde265/issues/460
CVE: CVE-2024-39241
Published: 2024-06-26
Description: Cross Site Scripting (XSS) vulnerability in skycaiji 2.8 allows attackers to run arbitrary code via /admin/tool/preview.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://fushuling.com/index.php/2024/06/19/test3/; https://fushuling.com/index.php/2024/06/19/test3/
CVE: CVE-2024-39242
Published: 2024-06-26
Description: A cross-site scripting (XSS) vulnerability in skycaiji v2.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload using eval(String.fromCharCode()).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://fushuling.com/index.php/2024/06/13/test2/; https://fushuling.com/index.php/2024/06/13/test2/
CVE: CVE-2024-39243
Published: 2024-06-26
Description: An issue discovered in skycaiji 2.8 allows attackers to run arbitrary code via crafted POST request to /index.php?s=/admin/develop/editor_save.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74, CWE-75
References: https://fushuling.com/index.php/2024/06/11/test/; https://fushuling.com/index.php/2024/06/11/test/
CVE: CVE-2024-1839
Published: 2024-06-26
Description: Intrado 911 Emergency Gateway login form is vulnerable to an unauthenticated blind time-based SQL injection, which may allow an unauthenticated remote attacker to execute malicious code, exfiltrate data, or manipulate the database.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-89
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-163-04; https://www.cisa.gov/news-events/ics-advisories/icsa-24-163-04
CVE: CVE-2024-23765
Published: 2024-06-26
Description: An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes an unidentified service on port 7412 on the network. All the network services of the gateway become unresponsive after sending 85 requests to this port. The content and length of the frame does not matter. The device needs to be restarted to resume operations.
CVSS Score: 4.0 (MEDIUM)
References: https://sensepost.com/blog/2024/targeting-an-industrial-protocol-gateway/; https://sensepost.com/blog/2024/targeting-an-industrial-protocol-gateway/
CVE: CVE-2024-23766
Published: 2024-06-26
Description: An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web interface on port 80. An unauthenticated GET request to a specific URL triggers the reboot of the Anybus gateway (or at least most of its modules). An attacker can use this feature to carry out a denial of service attack by continuously sending GET requests to that URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-598
References: https://sensepost.com/blog/2024/targeting-an-industrial-protocol-gateway/; https://sensepost.com/blog/2024/targeting-an-industrial-protocol-gateway/
CVE: CVE-2024-23767
Published: 2024-06-26
Description: An issue was discovered on HMS Anybus X-Gateway AB7832-F firmware version 3. The HICP protocol allows unauthenticated changes to a device's network configurations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://sensepost.com/blog/2024/targeting-an-industrial-protocol-gateway/; https://sensepost.com/blog/2024/targeting-an-industrial-protocol-gateway/; https://github.com/claire-lex/anybus-hicp/blob/main/hicp_config.py
CVE: CVE-2024-36829
Published: 2024-06-26
Description: Incorrect access control in Teldat M1 v11.00.05.50.01 allows attackers to obtain sensitive information via a crafted query string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://gist.github.com/MILPDS/96843ccf7369ec1da643b7d6e22d428d; https://gist.github.com/MILPDS/96843ccf7369ec1da643b7d6e22d428d
CVE: CVE-2024-6355
Published: 2024-06-26
Description: A vulnerability was found in Genexis Tilgin Fiber Home Gateway HG1522 CSx000-01_09_01_12. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /status/product_info/. The manipulation of the argument product_info leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269755. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://vuldb.com/?ctiid.269755; https://vuldb.com/?id.269755; https://vuldb.com/?submit.359289
CVE: CVE-2024-37247
Published: 2024-06-26
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in twinpictures, baden03 jQuery T(-) Countdown Widget allows Stored XSS.This issue affects jQuery T(-) Countdown Widget: from n/a through 2.3.25.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/jquery-t-countdown-widget/wordpress-jquery-t-countdown-widget-plugin-2-3-25-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/jquery-t-countdown-widget/wordpress-jquery-t-countdown-widget-plugin-2-3-25-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-37248
Published: 2024-06-26
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Anima allows Stored XSS.This issue affects Anima: from n/a through 1.4.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/anima/wordpress-anima-theme-1-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/anima/wordpress-anima-theme-1-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-37571
Published: 2024-06-26
Description: Buffer Overflow vulnerability in SAS Broker 9.2 build 1495 allows attackers to cause denial of service or obtain sensitive information via crafted payload to the '_debug' parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-120
References: https://gist.github.com/MILPDS/e9da6d07ba1789defacec08f2f03293d; https://gist.github.com/MILPDS/e9da6d07ba1789defacec08f2f03293d
CVE: CVE-2024-37734
Published: 2024-06-26
Description: An issue in OpenEMR 7.0.2 allows a remote attacker to escalate privileges viaa crafted POST request using the noteid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-279
References: https://github.com/A3h1nt/CVEs/tree/main/OpenEMR; https://github.com/openemr/openemr/pull/7435#event[PII_REDACTED]7; https://github.com/A3h1nt/CVEs/tree/main/OpenEMR
CVE: CVE-2024-28982
Published: 2024-06-26
Description: Hitachi Vantara Pentaho Business Analytics Server versions before 10.1.0.0 and 9.3.0.7, including 8.3.x do not correctly protect the ACL service endpoint of the Pentaho User Console against XML External Entity Reference.
CVSS Score: 7.1 (HIGH)
CWE: CWE-776, CWE-776
References: https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]9869--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Improper-Restriction-of-XML-External-Entity-Reference-versions-before-10-1-0-0-and-9-3-0-7-including-8-3-x-Impacted-CVE-2024-28982; https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]9869--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Improper-Restriction-of-XML-External-Entity-Reference-versions-before-10-1-0-0-and-9-3-0-7-including-8-3-x-Impacted-CVE-2024-28982
CVE: CVE-2024-28983
Published: 2024-06-26
Description: Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malicious URL to inject content into the Analyzer plugin interface.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-79
References: https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]3725-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Improper-Neutralization-of-Input-During-Web-Page-Generation-Cross-site-Scripting-Versions-before-10-1-0-0-and-9-3-0-7-including-8-3-x-Impacted-CVE-2024-28983; https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]3725-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Improper-Neutralization-of-Input-During-Web-Page-Generation-Cross-site-Scripting-Versions-before-10-1-0-0-and-9-3-0-7-including-8-3-x-Impacted-CVE-2024-28983
CVE: CVE-2024-28984
Published: 2024-06-26
Description: Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malicious URL to inject content into the Analyzer plugin interface.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-79
References: https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]5901-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Improper-Neutralization-of-Input-During-Web-Page-Generation-Cross-site-Scripting-Versions-before-10-1-0-0-and-9-3-0-7-including-8-3-x-Impacted-CVE-2024-28984; https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]5901-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Improper-Neutralization-of-Input-During-Web-Page-Generation-Cross-site-Scripting-Versions-before-10-1-0-0-and-9-3-0-7-including-8-3-x-Impacted-CVE-2024-28984
CVE: CVE-2024-1493
Published: 2024-06-27
Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 9.2 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, with the processing logic for generating link in dependency files can lead to a regular  expression DoS attack on the server
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1333, CWE-1333
References: https://gitlab.com/gitlab-org/gitlab/-/issues/441806; https://hackerone.com/reports/2370084; https://gitlab.com/gitlab-org/gitlab/-/issues/441806
CVE: CVE-2024-1816
Published: 2024-06-27
Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 12.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows for an attacker to cause a denial of service using a crafted OpenAPI file.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://gitlab.com/gitlab-org/gitlab/-/issues/442852; https://hackerone.com/reports/2370737; https://gitlab.com/gitlab-org/gitlab/-/issues/442852
CVE: CVE-2024-2191
Published: 2024-06-27
Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows merge request title to be visible publicly despite being set as project members only.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://gitlab.com/gitlab-org/gitlab/-/issues/444655; https://hackerone.com/reports/2357370; https://gitlab.com/gitlab-org/gitlab/-/issues/444655
CVE: CVE-2024-3115
Published: 2024-06-27
Description: An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to access issues and epics without having an SSO session using Duo Chat.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://gitlab.com/gitlab-org/gitlab/-/issues/452548; https://hackerone.com/reports/2417868; https://gitlab.com/gitlab-org/gitlab/-/issues/452548
CVE: CVE-2024-3959
Published: 2024-06-27
Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows private job artifacts can be accessed by any user.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-285
References: https://gitlab.com/gitlab-org/gitlab/-/issues/456989; https://hackerone.com/reports/2456845; https://gitlab.com/gitlab-org/gitlab/-/issues/456989
CVE: CVE-2024-4011
Published: 2024-06-27
Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows non-project member to promote key results to objectives.
CVSS Score: 3.1 (LOW)
CWE: CWE-863, CWE-863
References: https://gitlab.com/gitlab-org/gitlab/-/issues/457235; https://hackerone.com/reports/2456186; https://gitlab.com/gitlab-org/gitlab/-/issues/457235
CVE: CVE-2024-4557
Published: 2024-06-27
Description: Multiple Denial of Service (DoS) conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1 which allowed an attacker to cause resource exhaustion via banzai pipeline.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://gitlab.com/gitlab-org/gitlab/-/issues/460517; https://hackerone.com/reports/2485172; https://gitlab.com/gitlab-org/gitlab/-/issues/460517
CVE: CVE-2024-4901
Published: 2024-06-27
Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, where a stored XSS vulnerability could be imported from a project with malicious commit notes.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79, CWE-79
References: https://gitlab.com/gitlab-org/gitlab/-/issues/461773; https://hackerone.com/reports/2500163; https://gitlab.com/gitlab-org/gitlab/-/issues/461773
CVE: CVE-2024-5430
Published: 2024-06-27
Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 16.10 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows a project maintainer can delete the merge request approval policy via graphQL.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284
References: https://gitlab.com/gitlab-org/gitlab/-/issues/464017; https://hackerone.com/reports/2520947; https://gitlab.com/gitlab-org/gitlab/-/issues/464017