Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g797-r4r7-wp94

Опубликовано: 26 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.2

Описание

An issue has been discovered in GitLab CE/EE affecting all versions from 16.11 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Long-lived connections could potentially bypass authentication controls, allowing unauthorized access to streaming results.

An issue has been discovered in GitLab CE/EE affecting all versions from 16.11 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Long-lived connections could potentially bypass authentication controls, allowing unauthorized access to streaming results.

EPSS

Процентиль: 6%
0.00028
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-613

Связанные уязвимости

CVSS3: 4.2
ubuntu
7 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions from 16.11 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Long-lived connections could potentially bypass authentication controls, allowing unauthorized access to streaming results.

CVSS3: 4.2
nvd
7 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions from 16.11 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Long-lived connections could potentially bypass authentication controls, allowing unauthorized access to streaming results.

CVSS3: 4.2
debian
7 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions fr ...

CVSS3: 4.2
fstec
7 месяцев назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с неверным сроком действия сеанса, позволяющая нарушителю обойти процедуру аутентификации и получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 6%
0.00028
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-613