Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5m57-mhq7-6vhf

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2, >=13.5 to <13.5.5, and >=13.1 to <13.4.7.

Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2, >=13.5 to <13.5.5, and >=13.1 to <13.4.7.

EPSS

Процентиль: 42%
0.00196
Низкий

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 5 лет назад

Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2, >=13.5 to <13.5.5, and >=13.1 to <13.4.7.

CVSS3: 5.3
nvd
около 5 лет назад

Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2, >=13.5 to <13.5.5, and >=13.1 to <13.4.7.

CVSS3: 5.3
debian
около 5 лет назад

Information disclosure via GraphQL in GitLab CE/EE 13.1 and later expo ...

EPSS

Процентиль: 42%
0.00196
Низкий

Дефекты

CWE-200