Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wf4m-rq68-3mfc

Опубликовано: 12 янв. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Incorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2 allows group access tokens to continue working even after the group owner loses the ability to revoke them.

Incorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2 allows group access tokens to continue working even after the group owner loses the ability to revoke them.

EPSS

Процентиль: 20%
0.00062
Низкий

7.5 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 2 лет назад

Incorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2 allows group access tokens to continue working even after the group owner loses the ability to revoke them.

CVSS3: 5.3
nvd
больше 2 лет назад

Incorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2 allows group access tokens to continue working even after the group owner loses the ability to revoke them.

CVSS3: 5.3
debian
больше 2 лет назад

Incorrect Authorization check affecting all versions of GitLab EE from ...

EPSS

Процентиль: 20%
0.00062
Низкий

7.5 High

CVSS3

Дефекты

CWE-863