Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j8mj-5fpw-2pc8

Опубликовано: 06 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 3.5

Описание

An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1, allowed a user to run jobs in protected environments, bypassing any required approvals.

An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1, allowed a user to run jobs in protected environments, bypassing any required approvals.

EPSS

Процентиль: 0%
0.00006
Низкий

3.5 Low

CVSS3

Дефекты

CWE-284
CWE-862

Связанные уязвимости

CVSS3: 3.5
nvd
около 2 лет назад

An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1, allowed a user to run jobs in protected environments, bypassing any required approvals.

CVSS3: 3.5
debian
около 2 лет назад

An authorization issue affecting GitLab EE affecting all versions from ...

EPSS

Процентиль: 0%
0.00006
Низкий

3.5 Low

CVSS3

Дефекты

CWE-284
CWE-862