Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qr9v-c6jg-wx28

Опубликовано: 09 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.7

Описание

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certain conditions, could have allowed authenticated users with read-only API tokens to perform unauthorized write operations on vulnerability records by exploiting incorrectly scoped GraphQL mutations.

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certain conditions, could have allowed authenticated users with read-only API tokens to perform unauthorized write operations on vulnerability records by exploiting incorrectly scoped GraphQL mutations.

EPSS

Процентиль: 2%
0.00013
Низкий

7.7 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 7.7
ubuntu
25 дней назад

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certain conditions, could have allowed authenticated users with read-only API tokens to perform unauthorized write operations on vulnerability records by exploiting incorrectly scoped GraphQL mutations.

CVSS3: 7.7
nvd
25 дней назад

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certain conditions, could have allowed authenticated users with read-only API tokens to perform unauthorized write operations on vulnerability records by exploiting incorrectly scoped GraphQL mutations.

CVSS3: 7.7
debian
25 дней назад

GitLab has remediated an issue in GitLab EE affecting all versions fro ...

EPSS

Процентиль: 2%
0.00013
Низкий

7.7 High

CVSS3

Дефекты

CWE-863