Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gr98-7cg9-j7c7

Опубликовано: 27 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.6

Описание

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to trigger a pipeline as another user under certain circumstances.

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to trigger a pipeline as another user under certain circumstances.

EPSS

Процентиль: 58%
0.00362
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 9.6
ubuntu
12 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to trigger a pipeline as another user under certain circumstances.

CVSS3: 9.6
nvd
12 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to trigger a pipeline as another user under certain circumstances.

CVSS3: 9.6
debian
12 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions startin ...

CVSS3: 9.6
fstec
12 месяцев назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с недостатками разграничения доступа, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 58%
0.00362
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-284