Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-289q-cmj5-r43x

Опубликовано: 25 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-role users with insufficient privileges to make unauthorized modifications to protected Conan packages.

GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-role users with insufficient privileges to make unauthorized modifications to protected Conan packages.

EPSS

Процентиль: 14%
0.00229
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-288

Связанные уязвимости

CVSS3: 4.3
ubuntu
5 месяцев назад

GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-role users with insufficient privileges to make unauthorized modifications to protected Conan packages.

CVSS3: 4.3
nvd
5 месяцев назад

GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-role users with insufficient privileges to make unauthorized modifications to protected Conan packages.

CVSS3: 4.3
debian
5 месяцев назад

GitLab has remediated an issue in GitLab EE affecting all versions fro ...

CVSS3: 4.3
fstec
5 месяцев назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab Enterprise Edition (EE), связанная с обходом процедуры аутентификации посредством использования альтернативного пути или канала, позволяющая нарушителю обойти существующие механизмы безопасности

EPSS

Процентиль: 14%
0.00229
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-288