Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vcvr-9mwv-w2g3

Опубликовано: 13 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 3.1

Описание

An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain conditions could have allowed users to view assigned issues from restricted groups by bypassing IP restrictions.

An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain conditions could have allowed users to view assigned issues from restricted groups by bypassing IP restrictions.

EPSS

Процентиль: 5%
0.00021
Низкий

3.1 Low

CVSS3

Дефекты

CWE-1220

Связанные уязвимости

CVSS3: 3.1
ubuntu
4 месяца назад

An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain conditions could have allowed users to view assigned issues from restricted groups by bypassing IP restrictions.

CVSS3: 3.1
nvd
4 месяца назад

An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain conditions could have allowed users to view assigned issues from restricted groups by bypassing IP restrictions.

CVSS3: 3.1
debian
4 месяца назад

An improper access control in Gitlab EE affecting all versions from 12 ...

CVSS3: 3.1
fstec
9 месяцев назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/CE, связанная с недостатками разграничения доступа, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 5%
0.00021
Низкий

3.1 Low

CVSS3

Дефекты

CWE-1220