Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j45p-g8pv-jg87

Опубликовано: 13 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.6

Описание

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.0 which allows an attacker to trigger a pipeline as another user under certain circumstances.

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.0 which allows an attacker to trigger a pipeline as another user under certain circumstances.

EPSS

Процентиль: 5%
0.00024
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-250

Связанные уязвимости

CVSS3: 9.6
ubuntu
4 месяца назад

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.0 which allows an attacker to trigger a pipeline as another user under certain circumstances.

CVSS3: 9.6
nvd
4 месяца назад

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.0 which allows an attacker to trigger a pipeline as another user under certain circumstances.

CVSS3: 9.6
debian
4 месяца назад

An issue was discovered in GitLab CE/EE affecting all versions startin ...

CVSS3: 9.6
fstec
4 месяца назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с ошибками разграничения доступа, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 5%
0.00024
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-250