Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gj8c-fhmc-cqpg

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

An issue has been discovered in GitLab CE/EE affecting all versions starting with 13.11, 13.12 and 14.0. A specially crafted design image allowed attackers to read arbitrary files on the server.

An issue has been discovered in GitLab CE/EE affecting all versions starting with 13.11, 13.12 and 14.0. A specially crafted design image allowed attackers to read arbitrary files on the server.

EPSS

Процентиль: 52%
0.00286
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 9.6
ubuntu
почти 4 года назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.11 before 13.11.7, all versions starting from 13.12 before 13.12.8, and all versions starting from 14.0 before 14.0.4. A specially crafted design image allowed attackers to read arbitrary files on the server.

CVSS3: 9.6
nvd
почти 4 года назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.11 before 13.11.7, all versions starting from 13.12 before 13.12.8, and all versions starting from 14.0 before 14.0.4. A specially crafted design image allowed attackers to read arbitrary files on the server.

CVSS3: 9.6
debian
почти 4 года назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

CVSS3: 6.5
fstec
почти 4 года назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальным данным

EPSS

Процентиль: 52%
0.00286
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-79