Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-289q-cmj5-r43x

Опубликовано: 25 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-role users with insufficient privileges to make unauthorized modifications to protected Conan packages.

GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-role users with insufficient privileges to make unauthorized modifications to protected Conan packages.

EPSS

Процентиль: 1%
0.00011
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-288

Связанные уязвимости

CVSS3: 4.3
ubuntu
28 дней назад

GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-role users with insufficient privileges to make unauthorized modifications to protected Conan packages.

CVSS3: 4.3
nvd
28 дней назад

GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-role users with insufficient privileges to make unauthorized modifications to protected Conan packages.

CVSS3: 4.3
debian
28 дней назад

GitLab has remediated an issue in GitLab EE affecting all versions fro ...

CVSS3: 4.3
fstec
29 дней назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab Enterprise Edition (EE), связанная с обходом процедуры аутентификации посредством использования альтернативного пути или канала, позволяющая нарушителю обойти существующие механизмы безопасности

EPSS

Процентиль: 1%
0.00011
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-288