Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qrp8-hgrf-wv83

Опубликовано: 09 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Code owner approval was not removed from merge requests when the target branch was updated.

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Code owner approval was not removed from merge requests when the target branch was updated.

EPSS

Процентиль: 1%
0.00012
Низкий

8.1 High

CVSS3

Дефекты

CWE-284
CWE-863

Связанные уязвимости

CVSS3: 8.1
nvd
больше 1 года назад

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Code owner approval was not removed from merge requests when the target branch was updated.

CVSS3: 8.1
debian
больше 1 года назад

An issue has been discovered in GitLab EE affecting all versions start ...

CVSS3: 8.1
fstec
больше 1 года назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab Enterprise Edition, связанная с недостатками контроля доступа, позволяющая нарушителю обойти одобрение владельцев кода, изменив базовую ветвь MR

EPSS

Процентиль: 1%
0.00012
Низкий

8.1 High

CVSS3

Дефекты

CWE-284
CWE-863