Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pvxr-g7hw-fv88

Опубликовано: 13 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5

Описание

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances.

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances.

EPSS

Процентиль: 2%
0.00015
Низкий

5 Medium

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 5
ubuntu
6 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances.

CVSS3: 5
nvd
6 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances.

CVSS3: 5
debian
6 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions fr ...

CVSS3: 5
fstec
8 месяцев назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/CE, связанная с неправильным присвоением разрешений для критичного ресурса, позволяющая нарушителю получить доступ на чтение и изменение данных

EPSS

Процентиль: 2%
0.00015
Низкий

5 Medium

CVSS3

Дефекты

CWE-732