Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5c73-fgcq-grvm

Опубликовано: 06 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An improper access control issue in GitLab EE affecting all versions from 12.0 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an attacker to bypass IP allow-listing and download artifacts. This attack only bypasses IP allow-listing, proper permissions are still required.

An improper access control issue in GitLab EE affecting all versions from 12.0 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an attacker to bypass IP allow-listing and download artifacts. This attack only bypasses IP allow-listing, proper permissions are still required.

EPSS

Процентиль: 36%
0.0015
Низкий

7.5 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 5.9
ubuntu
больше 3 лет назад

An improper access control issue in GitLab EE affecting all versions from 12.0 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an attacker to bypass IP allow-listing and download artifacts. This attack only bypasses IP allow-listing, proper permissions are still required.

CVSS3: 5.9
nvd
больше 3 лет назад

An improper access control issue in GitLab EE affecting all versions from 12.0 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an attacker to bypass IP allow-listing and download artifacts. This attack only bypasses IP allow-listing, proper permissions are still required.

CVSS3: 5.9
debian
больше 3 лет назад

An improper access control issue in GitLab EE affecting all versions f ...

EPSS

Процентиль: 36%
0.0015
Низкий

7.5 High

CVSS3

Дефекты

CWE-863