Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mhv3-28f9-6jvj

Опубликовано: 11 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 3.8

Описание

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Guest user with admin_push_rules permission may have been able to create project-level deploy tokens.

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Guest user with admin_push_rules permission may have been able to create project-level deploy tokens.

EPSS

Процентиль: 13%
0.00044
Низкий

3.8 Low

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 3.8
ubuntu
11 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Guest user with `admin_push_rules` permission may have been able to create project-level deploy tokens.

CVSS3: 3.8
nvd
11 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Guest user with `admin_push_rules` permission may have been able to create project-level deploy tokens.

CVSS3: 3.8
debian
11 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions startin ...

CVSS3: 3.8
fstec
12 месяцев назад

Уязвимость функции admin_push_rules компонента Project-level Deploy Token Handler программной платформы на базе git для совместной работы над кодом GitLab, позволяющая нарушителю создавать токен развертывания на уровне проекта

EPSS

Процентиль: 13%
0.00044
Низкий

3.8 Low

CVSS3

Дефекты

CWE-284