Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v4qw-4358-7wh4

Опубликовано: 14 дек. 2021
Источник: github
Github: Не прошло ревью

Описание

Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker to see the names of project access tokens on arbitrary projects

Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker to see the names of project access tokens on arbitrary projects

EPSS

Процентиль: 58%
0.00366
Низкий

Дефекты

CWE-668

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 3 лет назад

Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker to see the names of project access tokens on arbitrary projects

CVSS3: 5.3
nvd
больше 3 лет назад

Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker to see the names of project access tokens on arbitrary projects

CVSS3: 5.3
debian
больше 3 лет назад

Improper access control in the GraphQL API in GitLab CE/EE affecting a ...

EPSS

Процентиль: 58%
0.00366
Низкий

Дефекты

CWE-668