Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-69vx-f9hq-xc87

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 10

Описание

GitLab before version 13.3.4 was vulnerable to an OAuth authorization scope change without user consent in the middle of the authorization flow.

GitLab before version 13.3.4 was vulnerable to an OAuth authorization scope change without user consent in the middle of the authorization flow.

EPSS

Процентиль: 46%
0.00232
Низкий

10 Critical

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 8
ubuntu
больше 5 лет назад

GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth authorization scope change without user consent in the middle of the authorization flow.

CVSS3: 8
nvd
больше 5 лет назад

GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth authorization scope change without user consent in the middle of the authorization flow.

CVSS3: 8
debian
больше 5 лет назад

GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth a ...

EPSS

Процентиль: 46%
0.00232
Низкий

10 Critical

CVSS3

Дефекты

CWE-863