Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-74cm-4qqj-22p4

Опубликовано: 11 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.6

Описание

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2, which allows an attacker to trigger a pipeline as another user under certain circumstances.

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2, which allows an attacker to trigger a pipeline as another user under certain circumstances.

EPSS

Процентиль: 71%
0.00665
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 9.6
ubuntu
больше 1 года назад

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2, which allows an attacker to trigger a pipeline as another user under certain circumstances.

CVSS3: 9.6
nvd
больше 1 года назад

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2, which allows an attacker to trigger a pipeline as another user under certain circumstances.

CVSS3: 9.6
debian
больше 1 года назад

An issue was discovered in GitLab CE/EE affecting all versions startin ...

CVSS3: 9.6
fstec
больше 1 года назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с ошибками разграничения доступа, позволяющая нарушителю выполнять конвейерные задания от имени произвольного пользователя

EPSS

Процентиль: 71%
0.00665
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-284