Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xq89-553h-3j4m

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's impersonation of a user are not cleared at the end of impersonation which may lead to unnecessary sensitive info disclosure.

In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's impersonation of a user are not cleared at the end of impersonation which may lead to unnecessary sensitive info disclosure.

EPSS

Процентиль: 31%
0.00114
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 5.9
ubuntu
больше 3 лет назад

In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's impersonation of a user are not cleared at the end of impersonation which may lead to unnecessary sensitive info disclosure.

CVSS3: 5.9
nvd
больше 3 лет назад

In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's impersonation of a user are not cleared at the end of impersonation which may lead to unnecessary sensitive info disclosure.

CVSS3: 5.9
debian
больше 3 лет назад

In all versions of GitLab CE/EE since version 8.0, access tokens creat ...

EPSS

Процентиль: 31%
0.00114
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-863