Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f8rc-7cqg-v9mm

Опубликовано: 08 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

An issue has been discovered in GitLab CE/EE affecting all versions before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. An issue was found that allows someone to abuse a discrepancy between the Web application display and the git command line interface to social engineer victims into cloning non-trusted code.

An issue has been discovered in GitLab CE/EE affecting all versions before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. An issue was found that allows someone to abuse a discrepancy between the Web application display and the git command line interface to social engineer victims into cloning non-trusted code.

EPSS

Процентиль: 13%
0.00045
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 5.3
ubuntu
11 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. An issue was found that allows someone to abuse a discrepancy between the Web application display and the git command line interface to social engineer victims into cloning non-trusted code.

CVSS3: 5.3
nvd
11 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. An issue was found that allows someone to abuse a discrepancy between the Web application display and the git command line interface to social engineer victims into cloning non-trusted code.

CVSS3: 5.3
debian
11 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions be ...

CVSS3: 5.3
fstec
11 месяцев назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с неверным управлением генерацией кода, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 13%
0.00045
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-94