Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8qr9-mc3w-88c6

Опубликовано: 27 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 3.1

Описание

An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. An AI feature was found to read unsanitized content in a way that could have allowed an attacker to hide prompt injection.

An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. An AI feature was found to read unsanitized content in a way that could have allowed an attacker to hide prompt injection.

EPSS

Процентиль: 14%
0.00047
Низкий

3.1 Low

CVSS3

Дефекты

CWE-116

Связанные уязвимости

CVSS3: 3.1
nvd
11 месяцев назад

An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. An AI feature was found to read unsanitized content in a way that could have allowed an attacker to hide prompt injection.

CVSS3: 3.1
debian
11 месяцев назад

An issue has been discovered in GitLab EE affecting all versions start ...

CVSS3: 5.3
fstec
11 месяцев назад

Уязвимость функция AI программной платформы на базе git для совместной работы над кодом GitLab, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 14%
0.00047
Низкий

3.1 Low

CVSS3

Дефекты

CWE-116