Описание
In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may allow access to the project which it was exported from.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| gitlab | fixed | 15.10.8+ds1-2 | package |
EPSS
Процентиль: 53%
0.00301
Низкий
Связанные уязвимости
CVSS3: 3.7
nvd
больше 3 лет назад
In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may allow access to the project which it was exported from.
CVSS3: 5.3
github
около 3 лет назад
In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may allow access to the project which it was exported from.
EPSS
Процентиль: 53%
0.00301
Низкий