Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-32j2-p2qq-hh3c

Опубликовано: 22 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

An issue has been discovered in GitLab EE affecting all versions starting from 16.4 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. Users with the Guest role can change Custom dashboard projects settings contrary to permissions.

An issue has been discovered in GitLab EE affecting all versions starting from 16.4 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. Users with the Guest role can change Custom dashboard projects settings contrary to permissions.

EPSS

Процентиль: 4%
0.00022
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-285
CWE-425

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 1 года назад

An issue has been discovered in GitLab EE affecting all versions starting from 16.4 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. Users with the `Guest` role can change `Custom dashboard projects` settings contrary to permissions.

CVSS3: 4.3
nvd
больше 1 года назад

An issue has been discovered in GitLab EE affecting all versions starting from 16.4 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. Users with the `Guest` role can change `Custom dashboard projects` settings contrary to permissions.

CVSS3: 4.3
debian
больше 1 года назад

An issue has been discovered in GitLab EE affecting all versions start ...

CVSS3: 4.3
fstec
больше 1 года назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с недостатками процедуры авторизации, позволяющая нарушителю изменить настройки пользовательской панели управления проектами

EPSS

Процентиль: 4%
0.00022
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-285
CWE-425