FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Gitlab -- multiple vulnerabilities

Affected packages
11.2.0 <= gitlab-ce < 11.2.3
11.1.0 <= gitlab-ce < 11.1.6
2.7.0 <= gitlab-ce < 11.0.6


VuXML ID ffeb25d0-ac94-11e8-ab15-d8cb8abf62dd
Discovery 2018-08-28
Entry 2018-08-30

Gitlab reports:

Persistent XSS in Pipeline Tooltip GCP Endpoints Exposure

Persistent XSS in Merge Request Changes View

Sensitive Data Disclosure in Sidekiq Logs

Missing CSRF in System Hooks

Orphaned Upload Files Exposure

Missing Authorization Control API Repository Storage