Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-962h-g945-9r98

Опубликовано: 12 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.4

Описание

An issue has been discovered in GitLab EE affecting all versions starting from 12.9 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under certain conditions an open redirect vulnerability could allow for an account takeover by breaking the OAuth flow.

An issue has been discovered in GitLab EE affecting all versions starting from 12.9 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under certain conditions an open redirect vulnerability could allow for an account takeover by breaking the OAuth flow.

EPSS

Процентиль: 7%
0.00026
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 6.4
nvd
больше 1 года назад

An issue has been discovered in GitLab EE affecting all versions starting from 12.9 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under certain conditions an open redirect vulnerability could allow for an account takeover by breaking the OAuth flow.

CVSS3: 6.4
debian
больше 1 года назад

An issue has been discovered in GitLab EE affecting all versions start ...

EPSS

Процентиль: 7%
0.00026
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-601