exploitDog

GHSA-8wjh-279q-q77p

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

Описание

GitLab 10.1 through 12.8.1 has Incorrect Access Control. A scenario was discovered in which a GitLab account could be taken over through an expired link.

GitLab 10.1 through 12.8.1 has Incorrect Access Control. A scenario was discovered in which a GitLab account could be taken over through an expired link.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2020-10074
https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released
https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/index.html

EPSS

Процентиль: 67%

0.01276

Низкий

CVE ID

Связанные уязвимости

CVE-2020-10074

CVSS3: 9.8

ubuntu

больше 6 лет назад

GitLab 10.1 through 12.8.1 has Incorrect Access Control. A scenario was discovered in which a GitLab account could be taken over through an expired link.

CVE-2020-10074

CVSS3: 9.8

nvd

больше 6 лет назад

GitLab 10.1 through 12.8.1 has Incorrect Access Control. A scenario was discovered in which a GitLab account could be taken over through an expired link.

CVE-2020-10074

CVSS3: 9.8

debian

больше 6 лет назад

GitLab 10.1 through 12.8.1 has Incorrect Access Control. A scenario wa ...

EPSS

Процентиль: 67%

0.01276

Низкий

CVE ID