Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j8qf-xxg6-jf5p

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project are able to post comments on confidential issues through an authorization issue in the note endpoint.

An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project are able to post comments on confidential issues through an authorization issue in the note endpoint.

EPSS

Процентиль: 25%
0.00081
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
ubuntu
почти 6 лет назад

An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project are able to post comments on confidential issues through an authorization issue in the note endpoint.

CVSS3: 5.4
nvd
почти 6 лет назад

An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project are able to post comments on confidential issues through an authorization issue in the note endpoint.

CVSS3: 5.4
debian
почти 6 лет назад

An issue was discovered in GitLab Community and Enterprise Edition bef ...

EPSS

Процентиль: 25%
0.00081
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79