Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wrm3-h327-j8wh

Опубликовано: 06 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. It was possible for an unauthorised project or group member to read the CI/CD variables using the custom project templates.

An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. It was possible for an unauthorised project or group member to read the CI/CD variables using the custom project templates.

EPSS

Процентиль: 13%
0.00045
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-201
CWE-284

Связанные уязвимости

CVSS3: 8.5
ubuntu
больше 1 года назад

An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. It was possible for an unauthorised project or group member to read the CI/CD variables using the custom project templates.

CVSS3: 8.5
nvd
больше 1 года назад

An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. It was possible for an unauthorised project or group member to read the CI/CD variables using the custom project templates.

CVSS3: 8.5
debian
больше 1 года назад

An issue has been discovered in GitLab EE affecting all versions start ...

EPSS

Процентиль: 13%
0.00045
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-201
CWE-284