Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qr9v-c6jg-wx28

Опубликовано: 09 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.7

Описание

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certain conditions, could have allowed authenticated users with read-only API tokens to perform unauthorized write operations on vulnerability records by exploiting incorrectly scoped GraphQL mutations.

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certain conditions, could have allowed authenticated users with read-only API tokens to perform unauthorized write operations on vulnerability records by exploiting incorrectly scoped GraphQL mutations.

EPSS

Процентиль: 4%
0.00018
Низкий

7.7 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 7.7
ubuntu
4 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certain conditions, could have allowed authenticated users with read-only API tokens to perform unauthorized write operations on vulnerability records by exploiting incorrectly scoped GraphQL mutations.

CVSS3: 7.7
nvd
4 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certain conditions, could have allowed authenticated users with read-only API tokens to perform unauthorized write operations on vulnerability records by exploiting incorrectly scoped GraphQL mutations.

CVSS3: 7.7
debian
4 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions fro ...

CVSS3: 7.7
fstec
4 месяца назад

Уязвимость интерфейса GraphQL API программной платформы на базе git для совместной работы над кодом GitLab, позволяющая нарушителю получить доступ на чтение, изменение или удаление данных

EPSS

Процентиль: 4%
0.00018
Низкий

7.7 High

CVSS3

Дефекты

CWE-863