Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qccf-5wwv-jq8x

Опубликовано: 27 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.8

Описание

An issue has been discovered in GitLab CE/EE affecting all versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that could have allowed unauthenticated users to access sensitive manual CI/CD variables by querying the GraphQL API.

An issue has been discovered in GitLab CE/EE affecting all versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that could have allowed unauthenticated users to access sensitive manual CI/CD variables by querying the GraphQL API.

EPSS

Процентиль: 6%
0.00026
Низкий

5.8 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 5.8
nvd
21 день назад

An issue has been discovered in GitLab CE/EE affecting all versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that could have allowed unauthenticated users to access sensitive manual CI/CD variables by querying the GraphQL API.

CVSS3: 5.8
debian
21 день назад

An issue has been discovered in GitLab CE/EE affecting all versions be ...

EPSS

Процентиль: 6%
0.00026
Низкий

5.8 Medium

CVSS3

Дефекты

CWE-862