Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r22j-98fp-4fw9

Опубликовано: 15 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 3.5

Описание

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from confidential issues by injecting hidden prompts into merge request comments.

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from confidential issues by injecting hidden prompts into merge request comments.

EPSS

Процентиль: 8%
0.00031
Низкий

3.5 Low

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 3.5
ubuntu
16 дней назад

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from confidential issues by injecting hidden prompts into merge request comments.

CVSS3: 3.5
nvd
16 дней назад

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from confidential issues by injecting hidden prompts into merge request comments.

CVSS3: 3.5
debian
16 дней назад

GitLab has remediated an issue in GitLab EE affecting all versions fro ...

CVSS3: 3.5
fstec
19 дней назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с непринятием мер по чистке данных на управляющем уровне, позволяющая нарушителю получить несанкционированный доступ к конфиденциальной информации

EPSS

Процентиль: 8%
0.00031
Низкий

3.5 Low

CVSS3

Дефекты

CWE-77