Threatline

Results for “"unauthenticated user"”

1–10 of 21 articles

Best match · title matches first

The Hacker News

27 days ago

GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. "GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD

gitlab patches

Threatline

Results for “"unauthenticated user"”

GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

ServiceNow Patches Critical AI Platform Flaw Allowing Unauthenticated User Impersonation

Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication

ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances

Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution

New MongoDB Flaw Lets Unauthenticated Attackers Read Uninitialized Memory

Low-Code Tools in Microsoft Azure Allowed Unprivileged Access

Critical zero-days impact premium WordPress real estate plugins