Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5fw4-hg92-mgm7

Опубликовано: 28 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 allows a project maintainer to access the DataDog integration API key from webhook logs.

An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 allows a project maintainer to access the DataDog integration API key from webhook logs.

EPSS

Процентиль: 51%
0.0028
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-532
CWE-668

Связанные уязвимости

CVSS3: 6.8
ubuntu
больше 3 лет назад

An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 allows a project maintainer to access the DataDog integration API key from webhook logs.

CVSS3: 6.8
nvd
больше 3 лет назад

An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 allows a project maintainer to access the DataDog integration API key from webhook logs.

CVSS3: 6.8
debian
больше 3 лет назад

An information disclosure vulnerability in GitLab CE/EE affecting all ...

EPSS

Процентиль: 51%
0.0028
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-532
CWE-668