Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5q5j-r39w-wc64

Опубликовано: 12 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.6

Описание

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2. The required CODEOWNERS approval could be bypassed by adding changes to a previously approved merge request.

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2. The required CODEOWNERS approval could be bypassed by adding changes to a previously approved merge request.

EPSS

Процентиль: 1%
0.0001
Низкий

7.6 High

CVSS3

Дефекты

CWE-284
CWE-863

Связанные уязвимости

CVSS3: 7.6
ubuntu
около 2 лет назад

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2. The required CODEOWNERS approval could be bypassed by adding changes to a previously approved merge request.

CVSS3: 7.6
nvd
около 2 лет назад

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2. The required CODEOWNERS approval could be bypassed by adding changes to a previously approved merge request.

CVSS3: 7.6
debian
около 2 лет назад

An issue has been discovered in GitLab EE affecting all versions start ...

CVSS3: 7.6
fstec
больше 2 лет назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с недостатками разграничения доступа, позволяющая нарушителю получить доступ на чтение, изменение или удаление данных

EPSS

Процентиль: 1%
0.0001
Низкий

7.6 High

CVSS3

Дефекты

CWE-284
CWE-863