Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ph8h-4mq7-vw5v

Опубликовано: 12 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.9

Описание

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3 prior to 17.3.2, which allows an attacker to trigger a pipeline as an arbitrary user under certain circumstances.

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3 prior to 17.3.2, which allows an attacker to trigger a pipeline as an arbitrary user under certain circumstances.

EPSS

Процентиль: 22%
0.00072
Низкий

9.9 Critical

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 9.9
ubuntu
больше 1 года назад

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3 prior to 17.3.2, which allows an attacker to trigger a pipeline as an arbitrary user under certain circumstances.

CVSS3: 9.9
redhat
больше 1 года назад

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3 prior to 17.3.2, which allows an attacker to trigger a pipeline as an arbitrary user under certain circumstances.

CVSS3: 9.9
nvd
больше 1 года назад

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3 prior to 17.3.2, which allows an attacker to trigger a pipeline as an arbitrary user under certain circumstances.

CVSS3: 9.9
debian
больше 1 года назад

An issue was discovered in GitLab CE/EE affecting all versions startin ...

CVSS3: 9.9
fstec
больше 1 года назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с обходом аутентификации посредством спуфинга, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 22%
0.00072
Низкий

9.9 Critical

CVSS3

Дефекты

CWE-290