Gitlab -- Multiple Vulnerabilitiesentered 2019-08-13
no CVE referenced
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| devel/rubygem-gitlab_meta | rubygem-gitlab_meta | 7.0 | unaddressed | ruby@FreeBSD.org |
no CVE referenced
Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.
<vuln vid="FIXME (make newentry)">
<topic>FIXME -- FIXME</topic>
<affects>
<package>
<name>rubygem-gitlab_meta</name>
<range><lt>11.11.8</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>An issue was discovered in GitLab Community and Enterprise Edition
before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6. Cookies for
GitLab Pages (which have access control) could be sent over cleartext
HTTP.</p>
</body>
</description>
<references>
<cvename>CVE-2019-14942</cvename>
<url>https://nvd.nist.gov/vuln/detail/CVE-2019-14942</url>
</references>
<dates>
<discovery>2023-04-16</discovery>
<entry>2026-10-25</entry>
</dates>
</vuln>