Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-38rf-7hwj-5rg8

Опубликовано: 22 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated user to access paid AI features without a valid subscription due to insufficient server-side validation in billing eligibility checks.

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated user to access paid AI features without a valid subscription due to insufficient server-side validation in billing eligibility checks.

EPSS

Процентиль: 2%
0.00126
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-348

Связанные уязвимости

CVSS3: 4.3
nvd
18 дней назад

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated user to access paid AI features without a valid subscription due to insufficient server-side validation in billing eligibility checks.

EPSS

Процентиль: 2%
0.00126
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-348