Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pvxr-g7hw-fv88

Опубликовано: 13 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5

Описание

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances.

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances.

EPSS

Процентиль: 22%
0.00291
Низкий

5 Medium

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 5
ubuntu
около 1 года назад

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances.

CVSS3: 5
nvd
около 1 года назад

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances.

CVSS3: 5
debian
около 1 года назад

An issue has been discovered in GitLab CE/EE affecting all versions fr ...

CVSS3: 5
fstec
больше 1 года назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/CE, связанная с неправильным присвоением разрешений для критичного ресурса, позволяющая нарушителю получить доступ на чтение и изменение данных

EPSS

Процентиль: 22%
0.00291
Низкий

5 Medium

CVSS3

Дефекты

CWE-732