Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4m8h-w9w3-cp2v

Опубликовано: 14 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

A Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions before 15.6.7, all versions starting from 15.7 before 15.7.6, and all versions starting from 15.8 before 15.8.1. An attacker could take over a project if an Owner or Maintainer uploads a file to a malicious project.

A Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions before 15.6.7, all versions starting from 15.7 before 15.7.6, and all versions starting from 15.8 before 15.8.1. An attacker could take over a project if an Owner or Maintainer uploads a file to a malicious project.

EPSS

Процентиль: 30%
0.00113
Низкий

8.1 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 6.4
ubuntu
почти 3 года назад

A Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions before 15.6.7, all versions starting from 15.7 before 15.7.6, and all versions starting from 15.8 before 15.8.1. An attacker could take over a project if an Owner or Maintainer uploads a file to a malicious project.

CVSS3: 6.4
nvd
почти 3 года назад

A Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions before 15.6.7, all versions starting from 15.7 before 15.7.6, and all versions starting from 15.8 before 15.8.1. An attacker could take over a project if an Owner or Maintainer uploads a file to a malicious project.

CVSS3: 6.4
debian
почти 3 года назад

A Cross Site Request Forgery issue has been discovered in GitLab CE/EE ...

EPSS

Процентиль: 30%
0.00113
Низкий

8.1 High

CVSS3

Дефекты

CWE-352