Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pvxr-g7hw-fv88

Опубликовано: 13 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5

Описание

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances.

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances.

EPSS

Процентиль: 14%
0.00229
Низкий

5 Medium

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 5
ubuntu
12 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances.

CVSS3: 5
nvd
12 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances.

CVSS3: 5
debian
12 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions fr ...

CVSS3: 5
fstec
около 1 года назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/CE, связанная с неправильным присвоением разрешений для критичного ресурса, позволяющая нарушителю получить доступ на чтение и изменение данных

EPSS

Процентиль: 14%
0.00229
Низкий

5 Medium

CVSS3

Дефекты

CWE-732