Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q22j-w3xw-wf5c

Опубликовано: 25 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticated user to access API tokens of self-hosted AI models due to improper access control.

GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticated user to access API tokens of self-hosted AI models due to improper access control.

EPSS

Процентиль: 37%
0.00459
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 6.8
nvd
4 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticated user to access API tokens of self-hosted AI models due to improper access control.

CVSS3: 6.8
debian
4 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions fro ...

CVSS3: 7.5
fstec
4 месяца назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab Enterprise Edition (EE), связанная с отсутствием аутентификации для критичной функции, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 37%
0.00459
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-306