Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g5f4-f74v-9j97

Опубликовано: 12 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 3.7

Описание

An issue has been discovered in GitLab affecting all versions starting from 12.6 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly authenticating a user that had some certain amount of information which allowed an user to authenticate without a personal access token.

An issue has been discovered in GitLab affecting all versions starting from 12.6 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly authenticating a user that had some certain amount of information which allowed an user to authenticate without a personal access token.

EPSS

Процентиль: 42%
0.00201
Низкий

3.7 Low

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 2
ubuntu
больше 3 лет назад

An issue has been discovered in GitLab affecting all versions starting from 12.6 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly authenticating a user that had some certain amount of information which allowed an user to authenticate without a personal access token.

CVSS3: 2
nvd
больше 3 лет назад

An issue has been discovered in GitLab affecting all versions starting from 12.6 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly authenticating a user that had some certain amount of information which allowed an user to authenticate without a personal access token.

CVSS3: 2
debian
больше 3 лет назад

An issue has been discovered in GitLab affecting all versions starting ...

EPSS

Процентиль: 42%
0.00201
Низкий

3.7 Low

CVSS3

Дефекты

CWE-287