Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jm36-4mv9-x2pw

Опубликовано: 19 янв. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3. Under certain conditions it was possible to bypass the IP restriction for public projects through GraphQL allowing unauthorised users to read titles of issues, merge requests and milestones.

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3. Under certain conditions it was possible to bypass the IP restriction for public projects through GraphQL allowing unauthorised users to read titles of issues, merge requests and milestones.

EPSS

Процентиль: 24%
0.00083
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 4 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3. Under certain conditions it was possible to bypass the IP restriction for public projects through GraphQL allowing unauthorised users to read titles of issues, merge requests and milestones.

CVSS3: 5.3
nvd
около 4 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3. Under certain conditions it was possible to bypass the IP restriction for public projects through GraphQL allowing unauthorised users to read titles of issues, merge requests and milestones.

CVSS3: 5.3
debian
около 4 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

EPSS

Процентиль: 24%
0.00083
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-863