Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x974-724g-rvvr

Опубликовано: 17 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

An issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. GitLab's Zentao integration has an insecure direct object reference vulnerability that may be exploited by an attacker to leak Zentao project issues.

An issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. GitLab's Zentao integration has an insecure direct object reference vulnerability that may be exploited by an attacker to leak Zentao project issues.

EPSS

Процентиль: 27%
0.0009
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 3.5
ubuntu
больше 2 лет назад

An issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. GitLab's Zentao integration has an insecure direct object reference vulnerability that may be exploited by an attacker to leak Zentao project issues.

CVSS3: 3.5
nvd
больше 2 лет назад

An issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. GitLab's Zentao integration has an insecure direct object reference vulnerability that may be exploited by an attacker to leak Zentao project issues.

CVSS3: 3.5
debian
больше 2 лет назад

An issue has been discovered in GitLab EE affecting all versions start ...

EPSS

Процентиль: 27%
0.0009
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-639