Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9xww-4cjx-6w55

Опубликовано: 16 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

An issue was discovered in GitLab CE/EE affecting all versions from 15.0 prior to 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior to 17.6.2 that allowed non-member users to view unresolved threads marked as internal notes in public projects merge requests.

An issue was discovered in GitLab CE/EE affecting all versions from 15.0 prior to 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior to 17.6.2 that allowed non-member users to view unresolved threads marked as internal notes in public projects merge requests.

EPSS

Процентиль: 1%
0.00009
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 5.3
ubuntu
6 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions from 15.0 prior to 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior to 17.6.2 that allowed non-member users to view unresolved threads marked as internal notes in public projects merge requests.

CVSS3: 5.3
nvd
6 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions from 15.0 prior to 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior to 17.6.2 that allowed non-member users to view unresolved threads marked as internal notes in public projects merge requests.

CVSS3: 5.3
debian
6 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions from 15 ...

CVSS3: 5.3
fstec
9 месяцев назад

Уязвимость компонента Public Project Handler программной платформы на базе git для совместной работы над кодом GitLab, позволяющая нарушителю получить доступ к защищаемой информации

EPSS

Процентиль: 1%
0.00009
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-863