Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8qr9-mc3w-88c6

Опубликовано: 27 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 3.1

Описание

An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. An AI feature was found to read unsanitized content in a way that could have allowed an attacker to hide prompt injection.

An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. An AI feature was found to read unsanitized content in a way that could have allowed an attacker to hide prompt injection.

EPSS

Процентиль: 8%
0.00033
Низкий

3.1 Low

CVSS3

Дефекты

CWE-116

Связанные уязвимости

CVSS3: 3.1
nvd
9 месяцев назад

An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. An AI feature was found to read unsanitized content in a way that could have allowed an attacker to hide prompt injection.

CVSS3: 3.1
debian
9 месяцев назад

An issue has been discovered in GitLab EE affecting all versions start ...

CVSS3: 5.3
fstec
9 месяцев назад

Уязвимость функция AI программной платформы на базе git для совместной работы над кодом GitLab, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 8%
0.00033
Низкий

3.1 Low

CVSS3

Дефекты

CWE-116