Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7p7x-r7pv-gq7p

Опубликовано: 11 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8

Описание

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to steal tokens and access private repositories by abusing incomplete validation in the Web IDE.

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to steal tokens and access private repositories by abusing incomplete validation in the Web IDE.

EPSS

Процентиль: 8%
0.00182
Низкий

8 High

CVSS3

Дефекты

CWE-346

Связанные уязвимости

CVSS3: 8
ubuntu
6 месяцев назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to steal tokens and access private repositories by abusing incomplete validation in the Web IDE.

CVSS3: 8
nvd
6 месяцев назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to steal tokens and access private repositories by abusing incomplete validation in the Web IDE.

CVSS3: 8
debian
6 месяцев назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions ...

CVSS3: 8
fstec
6 месяцев назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с недостатком в механизме подтверждения источника, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 8%
0.00182
Низкий

8 High

CVSS3

Дефекты

CWE-346