Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gcj2-4jcm-vgjg

Опубликовано: 06 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. It may be possible to gain access to a private project through an email invite by using other user's email address as an unverified secondary email.

An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. It may be possible to gain access to a private project through an email invite by using other user's email address as an unverified secondary email.

EPSS

Процентиль: 48%
0.00245
Низкий

8.1 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 6.4
ubuntu
больше 3 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. It may be possible to gain access to a private project through an email invite by using other user's email address as an unverified secondary email.

CVSS3: 6.4
nvd
больше 3 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. It may be possible to gain access to a private project through an email invite by using other user's email address as an unverified secondary email.

CVSS3: 6.4
debian
больше 3 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions be ...

EPSS

Процентиль: 48%
0.00245
Низкий

8.1 High

CVSS3

Дефекты

CWE-863