Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h93x-rrp4-r26c

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An issue was discovered in GitLab Community and Enterprise Edition 11.9 and later through 12.0.2. GitLab Snippets were vulnerable to an authorization issue that allowed unauthorized users to add comments to a private snippet. It allows authentication bypass.

An issue was discovered in GitLab Community and Enterprise Edition 11.9 and later through 12.0.2. GitLab Snippets were vulnerable to an authorization issue that allowed unauthorized users to add comments to a private snippet. It allows authentication bypass.

EPSS

Процентиль: 24%
0.00077
Низкий

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 5 лет назад

An issue was discovered in GitLab Community and Enterprise Edition 11.9 and later through 12.0.2. GitLab Snippets were vulnerable to an authorization issue that allowed unauthorized users to add comments to a private snippet. It allows authentication bypass.

CVSS3: 4.3
nvd
больше 5 лет назад

An issue was discovered in GitLab Community and Enterprise Edition 11.9 and later through 12.0.2. GitLab Snippets were vulnerable to an authorization issue that allowed unauthorized users to add comments to a private snippet. It allows authentication bypass.

CVSS3: 4.3
debian
больше 5 лет назад

An issue was discovered in GitLab Community and Enterprise Edition 11. ...

EPSS

Процентиль: 24%
0.00077
Низкий