Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x74g-xc7p-4fx7

Опубликовано: 08 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

An issue has been discovered in GitLab EE Premium and Ultimate affecting versions 16.4.3, 16.5.3, and 16.6.1. In projects using subgroups to define who can push and/or merge to protected branches, there may have been instances in which subgroup members with the Developer role were able to push or merge to protected branches.

An issue has been discovered in GitLab EE Premium and Ultimate affecting versions 16.4.3, 16.5.3, and 16.6.1. In projects using subgroups to define who can push and/or merge to protected branches, there may have been instances in which subgroup members with the Developer role were able to push or merge to protected branches.

EPSS

Процентиль: 4%
0.0002
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-285
CWE-863

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 1 года назад

An issue has been discovered in GitLab EE Premium and Ultimate affecting versions 16.4.3, 16.5.3, and 16.6.1. In projects using subgroups to define who can push and/or merge to protected branches, there may have been instances in which subgroup members with the Developer role were able to push or merge to protected branches.

CVSS3: 6.5
nvd
больше 1 года назад

An issue has been discovered in GitLab EE Premium and Ultimate affecting versions 16.4.3, 16.5.3, and 16.6.1. In projects using subgroups to define who can push and/or merge to protected branches, there may have been instances in which subgroup members with the Developer role were able to push or merge to protected branches.

CVSS3: 6.5
debian
больше 1 года назад

An issue has been discovered in GitLab EE Premium and Ultimate affecti ...

CVSS3: 6.5
fstec
больше 1 года назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с недостатками разграничения доступа, позволяющая нарушителю получить доступ на чтение и изменение данных

EPSS

Процентиль: 4%
0.0002
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-285
CWE-863