ngalog
7 credited records · 0 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
17Monitor | CVE-2021-39876No exploit | In all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee discloses the members of private groups.gitlab · gitlab · CWE-863 | Medium4.3 | — | 0.9% | Mar 28, 2022 |
17Monitor | CVE-2021-39930No exploit | Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and 14.5.2 allowed an attgitlab · gitlab · CWE-863 | Medium4.3 | — | 0.8% | Dec 13, 2021 |
10Monitor | CVE-2021-39901No exploit | In all versions of GitLab CE/EE since version 11.10, an admin of a group can see the SCIM token of that group by visiting a specific endpoingitlab · gitlab | Low2.7 | — | 0.9% | Nov 4, 2021 |
17Monitor | CVE-2021-39870No exploit | In all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable Repo by URL import enabled is bypassed by agitlab · gitlab | Medium4.3 | — | 0.9% | Oct 5, 2021 |
17Monitor | CVE-2021-22258No exploit | The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addressesgitlab · gitlab | Medium4.3 | — | 1.0% | Oct 5, 2021 |
26Monitor | CVE-2021-39872No exploit | In all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability allows users with expired password to still accgitlab · gitlab · CWE-287 | Medium6.5 | — | 0.9% | Oct 5, 2021 |
17Monitor | CVE-2021-39868No exploit | In all versions of GitLab CE/EE since version 8.12, an authenticated low-privileged malicious user may create a project with unlimited reposgitlab · gitlab · CWE-732 | Medium4.3 | — | 0.8% | Oct 4, 2021 |
- CVE-2021-3987617Monitor
In all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee discloses the members of private groups.
MediumCVSS 4.3No exploitEPSS 0%gitlab · gitlabMar 28, 2022
- CVE-2021-3993017Monitor
Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and 14.5.2 allowed an att
MediumCVSS 4.3No exploitEPSS 0%gitlab · gitlabDec 13, 2021
- CVE-2021-3990110Monitor
In all versions of GitLab CE/EE since version 11.10, an admin of a group can see the SCIM token of that group by visiting a specific endpoin
LowCVSS 2.7No exploitEPSS 0%gitlab · gitlabNov 4, 2021
- CVE-2021-3987017Monitor
In all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable Repo by URL import enabled is bypassed by a
MediumCVSS 4.3No exploitEPSS 0%gitlab · gitlabOct 5, 2021
- CVE-2021-2225817Monitor
The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addresses
MediumCVSS 4.3No exploitEPSS 1%gitlab · gitlabOct 5, 2021
- CVE-2021-3987226Monitor
In all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability allows users with expired password to still acc
MediumCVSS 6.5No exploitEPSS 0%gitlab · gitlabOct 5, 2021
- CVE-2021-3986817Monitor
In all versions of GitLab CE/EE since version 8.12, an authenticated low-privileged malicious user may create a project with unlimited repos
MediumCVSS 4.3No exploitEPSS 0%gitlab · gitlabOct 4, 2021