Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rhx5-h5p6-9g65

Опубликовано: 07 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.7

Описание

An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions.

An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions.

EPSS

Процентиль: 0%
0.00006
Низкий

7.7 High

CVSS3

Дефекты

CWE-284
CWE-863

Связанные уязвимости

CVSS3: 7.7
ubuntu
больше 1 года назад

An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions.

CVSS3: 7.7
nvd
больше 1 года назад

An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions.

CVSS3: 7.7
debian
больше 1 года назад

An authorization bypass vulnerability was discovered in GitLab affecti ...

EPSS

Процентиль: 0%
0.00006
Низкий

7.7 High

CVSS3

Дефекты

CWE-284
CWE-863