Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q297-5xx3-gw53

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Improper authorization in GitLab EE affecting all versions since 13.4 allowed a user who previously had the necessary access to trigger deployments to protected environments under specific conditions after the access has been removed

Improper authorization in GitLab EE affecting all versions since 13.4 allowed a user who previously had the necessary access to trigger deployments to protected environments under specific conditions after the access has been removed

EPSS

Процентиль: 54%
0.0031
Низкий

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 4.9
ubuntu
почти 4 года назад

Improper authorization in GitLab EE affecting all versions since 13.4 allowed a user who previously had the necessary access to trigger deployments to protected environments under specific conditions after the access has been removed

CVSS3: 4.9
nvd
почти 4 года назад

Improper authorization in GitLab EE affecting all versions since 13.4 allowed a user who previously had the necessary access to trigger deployments to protected environments under specific conditions after the access has been removed

CVSS3: 4.9
debian
почти 4 года назад

Improper authorization in GitLab EE affecting all versions since 13.4 ...

CVSS3: 5.4
fstec
почти 4 года назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с неправильной авторизацией, позволяющая нарушителю нарушить целостность данных, а также вызвать отказ в обслуживании

EPSS

Процентиль: 54%
0.0031
Низкий

Дефекты

CWE-863