Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-99mc-xqfg-j4xv

Опубликовано: 06 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. GitLab was not performing correct authentication on Grafana API under specific conditions allowing unauthenticated users to perform queries through a path traversal vulnerability.

An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. GitLab was not performing correct authentication on Grafana API under specific conditions allowing unauthenticated users to perform queries through a path traversal vulnerability.

EPSS

Процентиль: 71%
0.00663
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 3 лет назад

An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. GitLab was not performing correct authentication on Grafana API under specific conditions allowing unauthenticated users to perform queries through a path traversal vulnerability.

CVSS3: 5.3
nvd
больше 3 лет назад

An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. GitLab was not performing correct authentication on Grafana API under specific conditions allowing unauthenticated users to perform queries through a path traversal vulnerability.

CVSS3: 5.3
debian
больше 3 лет назад

An issue has been discovered in GitLab EE affecting all versions start ...

EPSS

Процентиль: 71%
0.00663
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-22