Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m4hq-98c3-4xmx

Опубликовано: 30 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. An authenticated attacker could perform arbitrary pipeline execution under the context of another user.

A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. An authenticated attacker could perform arbitrary pipeline execution under the context of another user.

EPSS

Процентиль: 34%
0.00134
Низкий

8.2 High

CVSS3

Дефекты

CWE-250
CWE-284

Связанные уязвимости

CVSS3: 8.2
ubuntu
больше 2 лет назад

A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. An authenticated attacker could perform arbitrary pipeline execution under the context of another user.

CVSS3: 8.2
redhat
больше 2 лет назад

A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. An authenticated attacker could perform arbitrary pipeline execution under the context of another user.

CVSS3: 8.2
nvd
больше 2 лет назад

A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. An authenticated attacker could perform arbitrary pipeline execution under the context of another user.

CVSS3: 8.2
debian
больше 2 лет назад

A vulnerability was discovered in GitLab CE and EE affecting all versi ...

CVSS3: 8.8
fstec
больше 2 лет назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с недостатками контроля доступа, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 34%
0.00134
Низкий

8.2 High

CVSS3

Дефекты

CWE-250
CWE-284