exploitDog

GHSA-q6vr-pm5m-w6c6

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

Описание

The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addresses

The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addresses

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2021-22258
https://hackerone.com/reports/410436
https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22258.json
https://gitlab.com/gitlab-org/gitlab/-/issues/24231

EPSS

Процентиль: 58%

0.0097

Низкий

CVE ID

Связанные уязвимости

CVE-2021-22258

CVSS3: 4.3

ubuntu

почти 5 лет назад

The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addresses

CVE-2021-22258

CVSS3: 4.3

nvd

почти 5 лет назад

The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addresses

CVE-2021-22258

CVSS3: 4.3

debian

почти 5 лет назад

The project import/export feature in GitLab 8.9 and greater could be u ...

EPSS

Процентиль: 58%

0.0097

Низкий

CVE ID