diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 85f0fcfe729d..dccb1fdeaf31 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -352,13 +352,13 @@ Notes:
SSRF in services and web hooks
There were multiple server-side request forgery issues in the Services feature. - An attacker could make requests to servers within the same network of the GitLab - instance. This could lead to information disclosure, authentication bypass, or - potentially code execution. This issue has been assigned - CVE-2018-8801.
+ An attacker could make requests to servers within the same network of the GitLab + instance. This could lead to information disclosure, authentication bypass, or + potentially code execution. This issue has been assigned + CVE-2018-8801.Gitlab Auth0 integration issue
There was an issue with the GitLab
+ which resulted in the Auth0 integration signing in the wrong users.omniauth-auth0
configuration - which resulted in the Auth0 integration signing in the wrong users.