Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c3hq-3p4c-ch2w

Опубликовано: 01 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

An issue has been discovered in GitLab affecting all versions starting from 11.3 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for unauthorized users to view a public projects' release descriptions via an atom endpoint when release access on the public was set to only project members.

An issue has been discovered in GitLab affecting all versions starting from 11.3 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for unauthorized users to view a public projects' release descriptions via an atom endpoint when release access on the public was set to only project members.

EPSS

Процентиль: 30%
0.00108
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200
CWE-201

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 2 лет назад

An issue has been discovered in GitLab affecting all versions starting from 11.3 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for unauthorized users to view a public projects' release descriptions via an atom endpoint when release access on the public was set to only project members.

CVSS3: 5.3
nvd
около 2 лет назад

An issue has been discovered in GitLab affecting all versions starting from 11.3 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for unauthorized users to view a public projects' release descriptions via an atom endpoint when release access on the public was set to only project members.

CVSS3: 5.3
debian
около 2 лет назад

An issue has been discovered in GitLab affecting all versions starting ...

EPSS

Процентиль: 30%
0.00108
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200
CWE-201