Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xq89-553h-3j4m

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's impersonation of a user are not cleared at the end of impersonation which may lead to unnecessary sensitive info disclosure.

In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's impersonation of a user are not cleared at the end of impersonation which may lead to unnecessary sensitive info disclosure.

EPSS

Процентиль: 58%
0.00971
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 5.9
ubuntu
почти 5 лет назад

In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's impersonation of a user are not cleared at the end of impersonation which may lead to unnecessary sensitive info disclosure.

CVSS3: 5.9
nvd
почти 5 лет назад

In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's impersonation of a user are not cleared at the end of impersonation which may lead to unnecessary sensitive info disclosure.

CVSS3: 5.9
debian
почти 5 лет назад

In all versions of GitLab CE/EE since version 8.0, access tokens creat ...

EPSS

Процентиль: 58%
0.00971
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-863