Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h2pr-7jw7-3ghr

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

An improper access control vulnerability exists in Gitlab EE <v12.3.3, <v12.2.7, & <v12.1.13 that allowed the group search feature with Elasticsearch to return private code, merge requests and commits.

An improper access control vulnerability exists in Gitlab EE <v12.3.3, <v12.2.7, & <v12.1.13 that allowed the group search feature with Elasticsearch to return private code, merge requests and commits.

EPSS

Процентиль: 57%
0.00347
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 6 лет назад

An improper access control vulnerability exists in Gitlab EE <v12.3.3, <v12.2.7, & <v12.1.13 that allowed the group search feature with Elasticsearch to return private code, merge requests and commits.

CVSS3: 5.3
nvd
около 6 лет назад

An improper access control vulnerability exists in Gitlab EE <v12.3.3, <v12.2.7, & <v12.1.13 that allowed the group search feature with Elasticsearch to return private code, merge requests and commits.

CVSS3: 5.3
debian
около 6 лет назад

An improper access control vulnerability exists in Gitlab EE <v12.3.3, ...

EPSS

Процентиль: 57%
0.00347
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-284