Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h2r9-r9v2-fvwp

Опубликовано: 29 мар. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab does not validate SSL certificates for some of external CI services which makes it possible to perform MitM attacks on connections to these external services.

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab does not validate SSL certificates for some of external CI services which makes it possible to perform MitM attacks on connections to these external services.

EPSS

Процентиль: 24%
0.00083
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 5.9
ubuntu
почти 4 года назад

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab does not validate SSL certificates for some of external CI services which makes it possible to perform MitM attacks on connections to these external services.

CVSS3: 5.9
nvd
почти 4 года назад

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab does not validate SSL certificates for some of external CI services which makes it possible to perform MitM attacks on connections to these external services.

CVSS3: 5.9
debian
почти 4 года назад

An issue has been discovered affecting GitLab versions prior to 14.4.5 ...

EPSS

Процентиль: 24%
0.00083
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-295