Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-35pc-qwv6-4858

Опубликовано: 29 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with Maintainer role to modify protected branch configuration due to improper authorization in a projects API endpoint.

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with Maintainer role to modify protected branch configuration due to improper authorization in a projects API endpoint.

EPSS

Процентиль: 25%
0.00326
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 4.9
nvd
16 дней назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with Maintainer role to modify protected branch configuration due to improper authorization in a projects API endpoint.

CVSS3: 4.9
fstec
17 дней назад

Уязвимость обработчика конфигурации защищённых веток Protected Branches программной платформы на базе git для совместной работы над кодом GitLab CE/EE, позволяющая нарушителю изменить конфигурацию защищенного филиала

EPSS

Процентиль: 25%
0.00326
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-862