Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fp7j-v353-cf72

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An insecure permissions issue was discovered in GitLab Community and Enterprise Edition 9.4 and later but before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. The runner registration token in the CI/CD settings could not be reset. This was a security risk if one of the maintainers leaves the group and they know the token.

An insecure permissions issue was discovered in GitLab Community and Enterprise Edition 9.4 and later but before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. The runner registration token in the CI/CD settings could not be reset. This was a security risk if one of the maintainers leaves the group and they know the token.

EPSS

Процентиль: 28%
0.00095
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 6 лет назад

An insecure permissions issue was discovered in GitLab Community and Enterprise Edition 9.4 and later but before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. The runner registration token in the CI/CD settings could not be reset. This was a security risk if one of the maintainers leaves the group and they know the token.

CVSS3: 7.5
nvd
около 6 лет назад

An insecure permissions issue was discovered in GitLab Community and Enterprise Edition 9.4 and later but before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. The runner registration token in the CI/CD settings could not be reset. This was a security risk if one of the maintainers leaves the group and they know the token.

CVSS3: 7.5
debian
около 6 лет назад

An insecure permissions issue was discovered in GitLab Community and E ...

EPSS

Процентиль: 28%
0.00095
Низкий