Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r86w-x85m-w6rj

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victim's session is compromised.

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victim's session is compromised.

EPSS

Процентиль: 27%
0.00089
Низкий

8.1 High

CVSS3

Дефекты

CWE-640

Связанные уязвимости

CVSS3: 8.1
ubuntu
почти 7 лет назад

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victim's session is compromised.

CVSS3: 8.1
nvd
почти 7 лет назад

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victim's session is compromised.

CVSS3: 8.1
debian
почти 7 лет назад

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10 ...

EPSS

Процентиль: 27%
0.00089
Низкий

8.1 High

CVSS3

Дефекты

CWE-640