Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7p75-9h8v-vxq4

Опубликовано: 12 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.4.6, from 17.5 prior to 17.5.4, and from 17.6 prior to 17.6.2. It may have been possible for an attacker with a victim's CI_JOB_TOKEN to obtain a GitLab session token belonging to the victim.

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.4.6, from 17.5 prior to 17.5.4, and from 17.6 prior to 17.6.2. It may have been possible for an attacker with a victim's CI_JOB_TOKEN to obtain a GitLab session token belonging to the victim.

EPSS

Процентиль: 3%
0.00019
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-270

Связанные уязвимости

CVSS3: 6.7
ubuntu
6 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.4.6, from 17.5 prior to 17.5.4, and from 17.6 prior to 17.6.2. It may have been possible for an attacker with a victim's `CI_JOB_TOKEN` to obtain a GitLab session token belonging to the victim.

CVSS3: 6.7
nvd
6 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.4.6, from 17.5 prior to 17.5.4, and from 17.6 prior to 17.6.2. It may have been possible for an attacker with a victim's `CI_JOB_TOKEN` to obtain a GitLab session token belonging to the victim.

CVSS3: 6.7
debian
6 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

CVSS3: 6.7
fstec
6 месяцев назад

Уязвимость компонента Session Token Handler программной платформы на базе git для совместной работы над кодом GitLab, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 3%
0.00019
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-270