Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fgvw-2v52-jhfv

Опубликовано: 17 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.4

Описание

An issue has been discovered in GitLab EE affecting all versions starting from 11.1 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under certain conditions an open redirect vulnerability could allow for an account takeover by breaking the OAuth flow.

An issue has been discovered in GitLab EE affecting all versions starting from 11.1 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under certain conditions an open redirect vulnerability could allow for an account takeover by breaking the OAuth flow.

EPSS

Процентиль: 7%
0.00026
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 6.4
ubuntu
больше 1 года назад

An issue has been discovered in GitLab EE affecting all versions starting from 11.1 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under certain conditions an open redirect vulnerability could allow for an account takeover by breaking the OAuth flow.

CVSS3: 6.4
nvd
больше 1 года назад

An issue has been discovered in GitLab EE affecting all versions starting from 11.1 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under certain conditions an open redirect vulnerability could allow for an account takeover by breaking the OAuth flow.

CVSS3: 6.4
debian
больше 1 года назад

An issue has been discovered in GitLab EE affecting all versions start ...

CVSS3: 6.4
fstec
больше 1 года назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, позволяющая нарушителю перехватить учетную запись пользователя

EPSS

Процентиль: 7%
0.00026
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-601