Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8qr9-mc3w-88c6

Опубликовано: 27 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 3.1

Описание

An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. An AI feature was found to read unsanitized content in a way that could have allowed an attacker to hide prompt injection.

An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. An AI feature was found to read unsanitized content in a way that could have allowed an attacker to hide prompt injection.

EPSS

Процентиль: 23%
0.00075
Низкий

3.1 Low

CVSS3

Дефекты

CWE-116

Связанные уязвимости

CVSS3: 3.1
nvd
больше 1 года назад

An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. An AI feature was found to read unsanitized content in a way that could have allowed an attacker to hide prompt injection.

CVSS3: 3.1
debian
больше 1 года назад

An issue has been discovered in GitLab EE affecting all versions start ...

CVSS3: 5.3
fstec
больше 1 года назад

Уязвимость функция AI программной платформы на базе git для совместной работы над кодом GitLab, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 23%
0.00075
Низкий

3.1 Low

CVSS3

Дефекты

CWE-116