Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3cm3-9ccj-7mvq

Опубликовано: 14 дек. 2021
Источник: github
Github: Не прошло ревью

Описание

Improper access control in the GitLab CE/EE API affecting all versions starting from 9.4 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an author of a Merge Request to approve the Merge Request even after having their project access revoked

Improper access control in the GitLab CE/EE API affecting all versions starting from 9.4 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an author of a Merge Request to approve the Merge Request even after having their project access revoked

EPSS

Процентиль: 47%
0.00244
Низкий

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 2.7
ubuntu
около 4 лет назад

Improper access control in the GitLab CE/EE API affecting all versions starting from 9.4 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an author of a Merge Request to approve the Merge Request even after having their project access revoked

CVSS3: 2.7
nvd
около 4 лет назад

Improper access control in the GitLab CE/EE API affecting all versions starting from 9.4 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an author of a Merge Request to approve the Merge Request even after having their project access revoked

CVSS3: 2.7
debian
около 4 лет назад

Improper access control in the GitLab CE/EE API affecting all versions ...

EPSS

Процентиль: 47%
0.00244
Низкий

Дефекты

CWE-863