Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r22j-98fp-4fw9

Опубликовано: 15 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 3.5

Описание

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from confidential issues by injecting hidden prompts into merge request comments.

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from confidential issues by injecting hidden prompts into merge request comments.

EPSS

Процентиль: 10%
0.00036
Низкий

3.5 Low

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 3.5
ubuntu
2 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from confidential issues by injecting hidden prompts into merge request comments.

CVSS3: 3.5
nvd
2 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from confidential issues by injecting hidden prompts into merge request comments.

CVSS3: 3.5
debian
2 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions fro ...

CVSS3: 3.5
fstec
2 месяца назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с непринятием мер по чистке данных на управляющем уровне, позволяющая нарушителю получить несанкционированный доступ к конфиденциальной информации

EPSS

Процентиль: 10%
0.00036
Низкий

3.5 Low

CVSS3

Дефекты

CWE-77