Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m6pw-2x85-c738

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

In all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable Repo by URL import enabled is bypassed by an attacker making a crafted API call.

In all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable Repo by URL import enabled is bypassed by an attacker making a crafted API call.

EPSS

Процентиль: 32%
0.00123
Низкий

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 4 лет назад

In all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable Repo by URL import enabled is bypassed by an attacker making a crafted API call.

CVSS3: 4.3
nvd
больше 4 лет назад

In all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable Repo by URL import enabled is bypassed by an attacker making a crafted API call.

CVSS3: 4.3
debian
больше 4 лет назад

In all versions of GitLab CE/EE since version 11.11, an instance that ...

EPSS

Процентиль: 32%
0.00123
Низкий