FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-22 18:21:47 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
b17c86b9-e52e-11e9-86e9-001b217b3468	Gitlab -- Multiple Vulnerabilities SO-AND-SO reports: XSS in Markdown Preview Using Mermaid Bypass Email Verification using Salesforce Authentication Account Takeover using SAML Uncontrolled Resource Consumption in Markdown using Mermaid Disclosure of Private Project Path and Labels Disclosure of Assignees via Milestones Disclosure of Project Path via Unsubscribe Link Disclosure of Project Milestones via Groups Disclosure of Private System Notes via GraphQL GIT Command Injection via API Bypass User Blocking via CI/CD token IDOR Adding Groups to Protected Environments Disclosure of Group Membership via Merge Request Approval Rules Disclosure of Head Pipeline via Blocking Merge Request Feature Grafana update Discovery 2019-09-30 Entry 2019-10-02 gitlab-ce ge 12.3.0 lt 12.3.2 ge 12.2.0 lt 12.2.6 ge 7.12.0 lt 12.1.12 https://about.gitlab.com/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/ CVE-2019-19039

VuXML ID

Description

b17c86b9-e52e-11e9-86e9-001b217b3468

Gitlab -- Multiple Vulnerabilities

SO-AND-SO reports:

XSS in Markdown Preview Using Mermaid

Bypass Email Verification using Salesforce Authentication

Account Takeover using SAML

Uncontrolled Resource Consumption in Markdown using Mermaid

Disclosure of Private Project Path and Labels

Disclosure of Assignees via Milestones

Disclosure of Project Path via Unsubscribe Link

Disclosure of Project Milestones via Groups

Disclosure of Private System Notes via GraphQL

GIT Command Injection via API

Bypass User Blocking via CI/CD token

IDOR Adding Groups to Protected Environments

Disclosure of Group Membership via Merge Request Approval Rules

Disclosure of Head Pipeline via Blocking Merge Request Feature

Grafana update

Discovery 2019-09-30
Entry 2019-10-02
gitlab-ce

ge 12.3.0 lt 12.3.2

ge 12.2.0 lt 12.2.6

ge 7.12.0 lt 12.1.12

https://about.gitlab.com/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/
CVE-2019-19039