Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vwj5-wr4r-cq36

Опубликовано: 22 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 3.7

Описание

An issue has been discovered in GitLab affecting all versions before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. It was possible for group members with sub-maintainer role to change the title of privately accessible deploy keys associated with projects in the group.

An issue has been discovered in GitLab affecting all versions before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. It was possible for group members with sub-maintainer role to change the title of privately accessible deploy keys associated with projects in the group.

EPSS

Процентиль: 4%
0.00022
Низкий

3.7 Low

CVSS3

Дефекты

CWE-284
CWE-863

Связанные уязвимости

CVSS3: 3.7
ubuntu
больше 1 года назад

An issue has been discovered in GitLab affecting all versions before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. It was possible for group members with sub-maintainer role to change the title of privately accessible deploy keys associated with projects in the group.

CVSS3: 3.7
nvd
больше 1 года назад

An issue has been discovered in GitLab affecting all versions before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. It was possible for group members with sub-maintainer role to change the title of privately accessible deploy keys associated with projects in the group.

CVSS3: 3.7
debian
больше 1 года назад

An issue has been discovered in GitLab affecting all versions before 1 ...

CVSS3: 3.7
fstec
почти 2 года назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с недостатками разграничения доступа, позволяющая нарушителю измененить заголовок приватных ключей развертывания (deploy keys)

EPSS

Процентиль: 4%
0.00022
Низкий

3.7 Low

CVSS3

Дефекты

CWE-284
CWE-863