Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x774-v4vm-3h8m

Опубликовано: 13 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.2

Описание

An issue discovered in GitLab CE/EE affecting all versions from 16.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 meant that long-lived connections in ActionCable potentially allowed revoked Personal Access Tokens access to streaming results.

An issue discovered in GitLab CE/EE affecting all versions from 16.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 meant that long-lived connections in ActionCable potentially allowed revoked Personal Access Tokens access to streaming results.

EPSS

Процентиль: 0%
0.00006
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-613

Связанные уязвимости

CVSS3: 4.2
ubuntu
4 месяца назад

An issue discovered in GitLab CE/EE affecting all versions from 16.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 meant that long-lived connections in ActionCable potentially allowed revoked Personal Access Tokens access to streaming results.

CVSS3: 4.2
nvd
4 месяца назад

An issue discovered in GitLab CE/EE affecting all versions from 16.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 meant that long-lived connections in ActionCable potentially allowed revoked Personal Access Tokens access to streaming results.

CVSS3: 4.2
debian
4 месяца назад

An issue discovered in GitLab CE/EE affecting all versions from 16.11 ...

CVSS3: 4.2
fstec
4 месяца назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/ CE, связанная с неверным сроком действия сеанса, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 0%
0.00006
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-613