Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w37f-8cwf-64g5

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Improper authorization on the pipelines page in GitLab CE/EE affecting all versions since 13.12 allowed unauthorized users to view some pipeline information for public projects that have access to pipelines restricted to members only

Improper authorization on the pipelines page in GitLab CE/EE affecting all versions since 13.12 allowed unauthorized users to view some pipeline information for public projects that have access to pipelines restricted to members only

EPSS

Процентиль: 61%
0.01051
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 5.3
ubuntu
почти 5 лет назад

Improper authorization on the pipelines page in GitLab CE/EE affecting all versions since 13.12 allowed unauthorized users to view some pipeline information for public projects that have access to pipelines restricted to members only

CVSS3: 5.3
nvd
почти 5 лет назад

Improper authorization on the pipelines page in GitLab CE/EE affecting all versions since 13.12 allowed unauthorized users to view some pipeline information for public projects that have access to pipelines restricted to members only

CVSS3: 5.3
debian
почти 5 лет назад

Improper authorization on the pipelines page in GitLab CE/EE affecting ...

CVSS3: 5.3
fstec
почти 5 лет назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с неправильной авторизацией, позволяющая нарушителю получить доступ к конфиденциальным данным

EPSS

Процентиль: 61%
0.01051
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-863