Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p26w-35r3-7x6p

Опубликовано: 13 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.2

Описание

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks.

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks.

EPSS

Процентиль: 9%
0.0019
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 4.2
ubuntu
26 дней назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks.

CVSS3: 4.2
nvd
26 дней назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks.

CVSS3: 4.2
fstec
28 дней назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с недостатками процедуры авторизации, позволяющая нарушителю загружать произвольные файлы

EPSS

Процентиль: 9%
0.0019
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-863