Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g5rc-vv3j-cq5q

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricted to group owners

An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricted to group owners

EPSS

Процентиль: 39%
0.0017
Низкий

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 4.9
ubuntu
почти 5 лет назад

An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricted to group owners

CVSS3: 4.9
nvd
почти 5 лет назад

An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricted to group owners

CVSS3: 4.9
debian
почти 5 лет назад

An authorization issue in GitLab CE/EE version 9.4 and up allowed a gr ...

EPSS

Процентиль: 39%
0.0017
Низкий

Дефекты

CWE-863