Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jc5p-hfq2-7mfm

Опубликовано: 26 янв. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

An issue has been discovered in GitLab affecting all versions starting from 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. GitLab was not performing correct authentication with some Package Registries when IP address restrictions were configured, allowing an attacker already in possession of a valid Deploy Token to misuse it from any location.

An issue has been discovered in GitLab affecting all versions starting from 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. GitLab was not performing correct authentication with some Package Registries when IP address restrictions were configured, allowing an attacker already in possession of a valid Deploy Token to misuse it from any location.

EPSS

Процентиль: 31%
0.00116
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 3 лет назад

An issue has been discovered in GitLab affecting all versions starting from 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. GitLab was not performing correct authentication with some Package Registries when IP address restrictions were configured, allowing an attacker already in possession of a valid Deploy Token to misuse it from any location.

CVSS3: 6.5
nvd
около 3 лет назад

An issue has been discovered in GitLab affecting all versions starting from 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. GitLab was not performing correct authentication with some Package Registries when IP address restrictions were configured, allowing an attacker already in possession of a valid Deploy Token to misuse it from any location.

CVSS3: 6.5
debian
около 3 лет назад

An issue has been discovered in GitLab affecting all versions starting ...

EPSS

Процентиль: 31%
0.00116
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-290