Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gq8g-2h99-85rv

Опубликовано: 12 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

An issue was discovered in GitLab-CE/EE affecting all versions starting with 17.0 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. An attacker as a guest user was able to access commit information via the release Atom endpoint, contrary to permissions.

An issue was discovered in GitLab-CE/EE affecting all versions starting with 17.0 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. An attacker as a guest user was able to access commit information via the release Atom endpoint, contrary to permissions.

EPSS

Процентиль: 17%
0.00055
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-497

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 1 года назад

An issue was discovered in GitLab-CE/EE affecting all versions starting with 17.0 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. An attacker as a guest user was able to access commit information via the release Atom endpoint, contrary to permissions.

CVSS3: 4.3
nvd
больше 1 года назад

An issue was discovered in GitLab-CE/EE affecting all versions starting with 17.0 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. An attacker as a guest user was able to access commit information via the release Atom endpoint, contrary to permissions.

CVSS3: 4.3
debian
больше 1 года назад

An issue was discovered in GitLab-CE/EE affecting all versions startin ...

EPSS

Процентиль: 17%
0.00055
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-497