Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6qcx-wmcg-gqpq

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 2.6

Описание

All versions of GitLab CE/EE starting with 12.8 were affected by an issue in the handling of x509 certificates that could be used to spoof author of signed commits.

All versions of GitLab CE/EE starting with 12.8 were affected by an issue in the handling of x509 certificates that could be used to spoof author of signed commits.

EPSS

Процентиль: 33%
0.00125
Низкий

2.6 Low

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 2.6
ubuntu
около 4 лет назад

All versions of GitLab CE/EE starting from 12.8 before 13.10.5, all versions starting from 13.11 before 13.11.5, and all versions starting from 13.12 before 13.12.2 were affected by an issue in the handling of x509 certificates that could be used to spoof author of signed commits.

CVSS3: 2.6
nvd
около 4 лет назад

All versions of GitLab CE/EE starting from 12.8 before 13.10.5, all versions starting from 13.11 before 13.11.5, and all versions starting from 13.12 before 13.12.2 were affected by an issue in the handling of x509 certificates that could be used to spoof author of signed commits.

CVSS3: 2.6
debian
около 4 лет назад

All versions of GitLab CE/EE starting from 12.8 before 13.10.5, all ve ...

CVSS3: 2.6
fstec
больше 4 лет назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с ошибками процедуры подтверждения подлинности сертификата, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 33%
0.00125
Низкий

2.6 Low

CVSS3

Дефекты

CWE-295