Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hm25-53gr-mc5r

Опубликовано: 03 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

In all versions of GitLab CE/EE, certain Unicode characters can be abused to commit malicious code into projects without being noticed in merge request or source code viewer UI.

In all versions of GitLab CE/EE, certain Unicode characters can be abused to commit malicious code into projects without being noticed in merge request or source code viewer UI.

EPSS

Процентиль: 53%
0.00299
Низкий

7.5 High

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 4 года назад

In all versions of GitLab CE/EE starting from 0.8.0 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 certain Unicode characters can be abused to commit malicious code into projects without being noticed in merge request or source code viewer UI.

CVSS3: 6.5
nvd
почти 4 года назад

In all versions of GitLab CE/EE starting from 0.8.0 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 certain Unicode characters can be abused to commit malicious code into projects without being noticed in merge request or source code viewer UI.

CVSS3: 6.5
debian
почти 4 года назад

In all versions of GitLab CE/EE starting from 0.8.0 before 14.2.6, all ...

EPSS

Процентиль: 53%
0.00299
Низкий

7.5 High

CVSS3

Дефекты

CWE-94