Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g5rc-vv3j-cq5q

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricted to group owners

An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricted to group owners

EPSS

Процентиль: 38%
0.0017
Низкий

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 4.9
ubuntu
около 5 лет назад

An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricted to group owners

CVSS3: 4.9
nvd
около 5 лет назад

An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricted to group owners

CVSS3: 4.9
debian
около 5 лет назад

An authorization issue in GitLab CE/EE version 9.4 and up allowed a gr ...

EPSS

Процентиль: 38%
0.0017
Низкий

Дефекты

CWE-863