Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-0120

Опубликовано: 01 сент. 2023
Источник: debian
EPSS Низкий

Описание

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. Due to improper permission validation it was possible to edit labels description by an unauthorised user.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
gitlabfixed16.4.4+ds2-2package

EPSS

Процентиль: 26%
0.00089
Низкий

Связанные уязвимости

CVSS3: 3.5
ubuntu
больше 2 лет назад

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. Due to improper permission validation it was possible to edit labels description by an unauthorised user.

CVSS3: 3.5
nvd
больше 2 лет назад

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. Due to improper permission validation it was possible to edit labels description by an unauthorised user.

CVSS3: 3.5
github
больше 2 лет назад

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. Due to improper permission validation it was possible to edit labels description by an unauthorised user.

EPSS

Процентиль: 26%
0.00089
Низкий