Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gf7j-5934-9pff

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

In all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable Bitbucket Server import enabled is bypassed by an attacker making a crafted API call.

In all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable Bitbucket Server import enabled is bypassed by an attacker making a crafted API call.

EPSS

Процентиль: 32%
0.00123
Низкий

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 4 лет назад

In all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable Bitbucket Server import enabled is bypassed by an attacker making a crafted API call.

CVSS3: 4.3
nvd
больше 4 лет назад

In all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable Bitbucket Server import enabled is bypassed by an attacker making a crafted API call.

CVSS3: 4.3
debian
больше 4 лет назад

In all versions of GitLab CE/EE since version 13.0, an instance that h ...

EPSS

Процентиль: 32%
0.00123
Низкий