Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4ccf-v4wp-c858

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersonating, the admin may be logged in as the second user they impersonated, which may lead to repudiation issues.

In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersonating, the admin may be logged in as the second user they impersonated, which may lead to repudiation issues.

EPSS

Процентиль: 42%
0.00197
Низкий

Связанные уязвимости

CVSS3: 3.8
ubuntu
больше 4 лет назад

In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersonating, the admin may be logged in as the second user they impersonated, which may lead to repudiation issues.

CVSS3: 3.8
nvd
больше 4 лет назад

In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersonating, the admin may be logged in as the second user they impersonated, which may lead to repudiation issues.

CVSS3: 3.8
debian
больше 4 лет назад

In all versions of GitLab CE/EE since version 8.0, when an admin uses ...

EPSS

Процентиль: 42%
0.00197
Низкий