Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5q5j-r39w-wc64

Опубликовано: 12 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.6

Описание

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2. The required CODEOWNERS approval could be bypassed by adding changes to a previously approved merge request.

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2. The required CODEOWNERS approval could be bypassed by adding changes to a previously approved merge request.

EPSS

Процентиль: 1%
0.00013
Низкий

7.6 High

CVSS3

Дефекты

CWE-284
CWE-863

Связанные уязвимости

CVSS3: 7.6
ubuntu
больше 1 года назад

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2. The required CODEOWNERS approval could be bypassed by adding changes to a previously approved merge request.

CVSS3: 7.6
nvd
больше 1 года назад

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2. The required CODEOWNERS approval could be bypassed by adding changes to a previously approved merge request.

CVSS3: 7.6
debian
больше 1 года назад

An issue has been discovered in GitLab EE affecting all versions start ...

CVSS3: 7.6
fstec
почти 2 года назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с недостатками разграничения доступа, позволяющая нарушителю получить доступ на чтение, изменение или удаление данных

EPSS

Процентиль: 1%
0.00013
Низкий

7.6 High

CVSS3

Дефекты

CWE-284
CWE-863