Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wf8r-f3x5-5p4r

Опубликовано: 12 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.5

Описание

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute CI/CD pipelines on a protected branch without the required push permissions due to improper authorization in pipeline reference validation.

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute CI/CD pipelines on a protected branch without the required push permissions due to improper authorization in pipeline reference validation.

EPSS

Процентиль: 18%
0.00259
Низкий

8.5 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 8.5
nvd
7 дней назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute CI/CD pipelines on a protected branch without the required push permissions due to improper authorization in pipeline reference validation.

EPSS

Процентиль: 18%
0.00259
Низкий

8.5 High

CVSS3

Дефекты

CWE-863