Vulnerabilities (CVE)

Filtered by CWE-286
Total 22 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-3115 1 Gitlab 1 Gitlab 2024-11-21 N/A 5.4 MEDIUM
An issue has been discovered in GitLab EE affecting all versions affecting all versions from 11.11 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Single Sign On restrictions were not correctly enforced for indirect project members accessing public members-only project repositories.
CVE-2022-35503 2024-11-21 N/A 7.5 HIGH
Improper verification of a user input in Open Source MANO v7-v12 allows an authenticated attacker to execute arbitrary code within the LCM module container via a Virtual Network Function (VNF) descriptor. An attacker may be able execute code to change the normal execution of the OSM components, retrieve confidential information, or gain access other parts of a Telco Operator infrastructure other than OSM itself.