Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9hv7-pg48-7596

Опубликовано: 29 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.5

Описание

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects.

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects.

EPSS

Процентиль: 3%
0.00016
Низкий

8.5 High

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 8.5
ubuntu
3 месяца назад

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects.

CVSS3: 8.5
nvd
3 месяца назад

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects.

CVSS3: 8.5
debian
3 месяца назад

GitLab has remediated an issue in EE affecting all versions from 17.1 ...

CVSS3: 8.5
fstec
4 месяца назад

Уязвимость прикладного программного интерфейса программной платформы на базе git для совместной работы над кодом GitLab EE, связанная с ошибками разграничения доступа, позволяющая нарушителю получить несанкционированный доступ к агентам из другого проекта

EPSS

Процентиль: 3%
0.00016
Низкий

8.5 High

CVSS3

Дефекты

CWE-862