Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9hv7-pg48-7596

Опубликовано: 29 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.5

Описание

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects.

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects.

EPSS

Процентиль: 49%
0.00607
Низкий

8.5 High

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 1 года назад

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects.

CVSS3: 8.8
nvd
около 1 года назад

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects.

CVSS3: 8.8
debian
около 1 года назад

GitLab has remediated an issue in EE affecting all versions from 17.1 ...

CVSS3: 8.5
fstec
около 1 года назад

Уязвимость прикладного программного интерфейса программной платформы на базе git для совместной работы над кодом GitLab EE, связанная с ошибками разграничения доступа, позволяющая нарушителю получить несанкционированный доступ к агентам из другого проекта

EPSS

Процентиль: 49%
0.00607
Низкий

8.5 High

CVSS3

Дефекты

CWE-862