Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-4340
6.5
MEDIUMCVSS v2
Published
January 23, 2017
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
The impersonate feature in Gitlab 8.7.0, 8.6.0 through 8.6.7, 8.5.0 through 8.5.11, 8.4.0 through 8.4.9, 8.3.0 through 8.3.8, and 8.2.0 through 8.2.4 allows remote authenticated users to "log in" as any other user via unspecified vectors.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.= 8.4.2, = 8.4.4, = 8.6.7, = 8.4.6, = 8.5.6, = 8.4.5, = 8.2.3, = 8.5.9, = 8.5.4, = 8.3.4, = 8.3.7, = 8.5.2, = 8.5.3, = 8.7.0, = 8.2.1, = 8.5.10, = 8.4.9, = 8.5.1, = 8.6.3, = 8.6.5, = 8.3.1, = 8.3.3, = 8.4.1, = 8.5.0, = 8.6.2, = 8.6.4, = 8.6.6, = 8.3.5, = 8.3.6, = 8.5.5, = 8.2.2, = 8.2.4, = 8.4.7, = 8.5.11, = 8.6.0, = 8.6.1, = 8.2.0, = 8.3.0, = 8.3.2, = 8.4.0, = 8.5.8, = 8.3.8, = 8.4.3, = 8.4.8, = 8.5.7NVD
gitlab
Crates.ioGitlab API client.
Crates.ioGitlab API client.
= 8.4.2, = 8.4.4, = 8.6.7, = 8.4.6, = 8.5.6, = 8.4.5, = 8.2.3, = 8.5.9, = 8.5.4, = 8.3.4, = 8.3.7, = 8.5.2, = 8.5.3, = 8.7.0, = 8.2.1, = 8.5.10, = 8.4.9, = 8.5.1, = 8.6.3, = 8.6.5, = 8.3.1, = 8.3.3, = 8.4.1, = 8.5.0, = 8.6.2, = 8.6.4, = 8.6.6, = 8.3.5, = 8.3.6, = 8.5.5, = 8.2.2, = 8.2.4, = 8.4.7, = 8.5.11, = 8.6.0, = 8.6.1, = 8.2.0, = 8.3.0, = 8.3.2, = 8.4.0, = 8.5.8, = 8.3.8, = 8.4.3, = 8.4.8, = 8.5.7NVD
RubyGems
GitHub