Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m4hq-98c3-4xmx

Опубликовано: 30 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. An authenticated attacker could perform arbitrary pipeline execution under the context of another user.

A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. An authenticated attacker could perform arbitrary pipeline execution under the context of another user.

EPSS

Процентиль: 41%
0.00189
Низкий

8.2 High

CVSS3

Дефекты

CWE-250
CWE-284

Связанные уязвимости

CVSS3: 8.2
ubuntu
почти 2 года назад

A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. An authenticated attacker could perform arbitrary pipeline execution under the context of another user.

CVSS3: 8.2
redhat
почти 2 года назад

A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. An authenticated attacker could perform arbitrary pipeline execution under the context of another user.

CVSS3: 8.2
nvd
почти 2 года назад

A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. An authenticated attacker could perform arbitrary pipeline execution under the context of another user.

CVSS3: 8.2
debian
почти 2 года назад

A vulnerability was discovered in GitLab CE and EE affecting all versi ...

CVSS3: 8.8
fstec
почти 2 года назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с недостатками контроля доступа, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 41%
0.00189
Низкий

8.2 High

CVSS3

Дефекты

CWE-250
CWE-284