Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4gm7-r4jp-2xqg

Опубликовано: 09 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user with developer-role permissions to modify protected environment settings due to improper authorization checks in the API.

GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user with developer-role permissions to modify protected environment settings due to improper authorization checks in the API.

EPSS

Процентиль: 23%
0.00311
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 4.3
ubuntu
4 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user with developer-role permissions to modify protected environment settings due to improper authorization checks in the API.

CVSS3: 4.3
nvd
4 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user with developer-role permissions to modify protected environment settings due to improper authorization checks in the API.

CVSS3: 4.3
debian
4 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions fro ...

CVSS3: 4.3
fstec
4 месяца назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab Enterprise Edition (EE), связанная с некорректной авторизацией, позволяющая нарушителю получить доступ на чтение и изменение данных

EPSS

Процентиль: 23%
0.00311
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-863