svn commit: r547380 - head/security/vuxml
Matthias Fechner
mfechner at FreeBSD.org
Wed Sep 2 19:39:20 UTC 2020
Author: mfechner
Date: Wed Sep 2 19:39:19 2020
New Revision: 547380
URL: https://svnweb.freebsd.org/changeset/ports/547380
Log:
Document gitlab vulnerabilities.
Modified:
head/security/vuxml/vuln.xml
Modified: head/security/vuxml/vuln.xml
==============================================================================
--- head/security/vuxml/vuln.xml Wed Sep 2 19:37:59 2020 (r547379)
+++ head/security/vuxml/vuln.xml Wed Sep 2 19:39:19 2020 (r547380)
@@ -58,6 +58,82 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="1fb13175-ed52-11ea-8b93-001b217b3468">
+ <topic>Gitlab -- multiple vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>gitlab-ce</name>
+ <range><ge>13.3.0</ge><lt>13.3.4</lt></range>
+ <range><ge>13.2.0</ge><lt>13.2.8</lt></range>
+ <range><ge>0</ge><lt>13.1.10</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Gitlab reports:</p>
+ <blockquote cite="https://about.gitlab.com/releases/2020/09/02/security-release-gitlab-13-3-3-released/">
+ <p>Vendor Cross-Account Assume-Role Attack</p>
+ <p>Stored XSS on the Vulnerability Page</p>
+ <p>Outdated Job Token Can Be Reused to Access Unauthorized Resources</p>
+ <p>File Disclosure Via Workhorse File Upload Bypass</p>
+ <p>Unauthorized Maintainer Can Edit Group Badge</p>
+ <p>Denial of Service Within Wiki Functionality</p>
+ <p>Sign-in Vulnerable to Brute-force Attacks</p>
+ <p>Invalidated Session Allows Account Access With an Old Password</p>
+ <p>GitLab Omniauth Endpoint Renders User Controlled Messages</p>
+ <p>Blind SSRF Through Repository Mirroring</p>
+ <p>Information Disclosure Through Incorrect Group Permission Verifications</p>
+ <p>No Rate Limit on GitLab Webhook Feature</p>
+ <p>GitLab Session Revocation Feature Does Not Invalidate All Sessions</p>
+ <p>OAuth Authorization Scope for an External Application Can Be Changed Without User Consent</p>
+ <p>Unauthorized Maintainer Can Delete Repository</p>
+ <p>Improper Verification of Deploy-Key Leads to Access Restricted Repository</p>
+ <p>Disabled Repository Still Accessible With a Deploy-Token</p>
+ <p>Duplicated Secret Code Generated by 2 Factor Authentication Mechanism</p>
+ <p>Lack of Validation Within Project Invitation Flow</p>
+ <p>Current Sessions Not Invalidated Upon Enabling 2 Factor Authentication</p>
+ <p>Users Without 2 Factor Authentication Can Be Blocked Accessing GitLab</p>
+ <p>Lack of Upper Bound Check Leading to Possible Denial of Service</p>
+ <p>2 Factor Authentication for Groups Was Not Enforced Within API Endpoint</p>
+ <p>GitLab Runner Denial of Service via CI Jobs</p>
+ <p>Update jQuery Dependency</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <url>https://about.gitlab.com/releases/2020/09/02/security-release-gitlab-13-3-3-released/</url>
+ <cvename>CVE-2020-13318</cvename>
+ <cvename>CVE-2020-13301</cvename>
+ <cvename>CVE-2020-13284</cvename>
+ <cvename>CVE-2020-13298</cvename>
+ <cvename>CVE-2020-13313</cvename>
+ <cvename>CVE-2020-13311</cvename>
+ <cvename>CVE-2020-13289</cvename>
+ <cvename>CVE-2020-13302</cvename>
+ <cvename>CVE-2020-13314</cvename>
+ <cvename>CVE-2020-13309</cvename>
+ <cvename>CVE-2020-13287</cvename>
+ <cvename>CVE-2020-13306</cvename>
+ <cvename>CVE-2020-13299</cvename>
+ <cvename>CVE-2020-13300</cvename>
+ <cvename>CVE-2020-13317</cvename>
+ <cvename>CVE-2020-13303</cvename>
+ <cvename>CVE-2020-13316</cvename>
+ <cvename>CVE-2020-13304</cvename>
+ <cvename>CVE-2020-13305</cvename>
+ <cvename>CVE-2020-13307</cvename>
+ <cvename>CVE-2020-13308</cvename>
+ <cvename>CVE-2020-13315</cvename>
+ <cvename>CVE-2020-13297</cvename>
+ <cvename>CVE-2020-13310</cvename>
+ <cvename>CVE-2020-11022</cvename>
+ </references>
+ <dates>
+ <discovery>2020-09-02</discovery>
+ <entry>2020-09-02</entry>
+ </dates>
+ </vuln>
+
<vuln vid="67b050ae-ec82-11ea-9071-10c37b4ac2ea">
<topic>go -- net/http/cgi, net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</topic>
<affects>
More information about the svn-ports-all
mailing list