Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-chxc-x49q-7m83

Опубликовано: 02 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0 prior to 16.4.1 that could allow an attacker to impersonate users in CI pipelines through direct transfer group imports.

An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0 prior to 16.4.1 that could allow an attacker to impersonate users in CI pipelines through direct transfer group imports.

EPSS

Процентиль: 12%
0.00041
Низкий

8.2 High

CVSS3

Дефекты

CWE-284
CWE-863

Связанные уязвимости

CVSS3: 8.2
ubuntu
больше 2 лет назад

An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0 prior to 16.4.1 that could allow an attacker to impersonate users in CI pipelines through direct transfer group imports.

CVSS3: 8.2
nvd
больше 2 лет назад

An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0 prior to 16.4.1 that could allow an attacker to impersonate users in CI pipelines through direct transfer group imports.

CVSS3: 8.2
debian
больше 2 лет назад

An issue has been discovered in Ultimate-licensed GitLab EE affecting ...

EPSS

Процентиль: 12%
0.00041
Низкий

8.2 High

CVSS3

Дефекты

CWE-284
CWE-863