Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xpg3-c2hf-x9vf

Опубликовано: 06 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 3.8

Описание

A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1 allows a malicious Group Owner to retain a usable Group Access Token even after the Group is deleted, though the APIs usable by that token are limited.

A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1 allows a malicious Group Owner to retain a usable Group Access Token even after the Group is deleted, though the APIs usable by that token are limited.

EPSS

Процентиль: 29%
0.00102
Низкий

3.8 Low

CVSS3

Дефекты

CWE-459

Связанные уязвимости

CVSS3: 3.5
ubuntu
почти 3 года назад

A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1 allows a malicious Group Owner to retain a usable Group Access Token even after the Group is deleted, though the APIs usable by that token are limited.

CVSS3: 3.5
nvd
почти 3 года назад

A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1 allows a malicious Group Owner to retain a usable Group Access Token even after the Group is deleted, though the APIs usable by that token are limited.

CVSS3: 3.5
debian
почти 3 года назад

A lack of cascading deletes in GitLab CE/EE affecting all versions sta ...

EPSS

Процентиль: 29%
0.00102
Низкий

3.8 Low

CVSS3

Дефекты

CWE-459