Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xxf3-q32p-w3cc

Опубликовано: 22 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 3.1

Описание

GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated to bypass a required merge request approval policy on a protected branch due to improper access control during approval rule synchronization.

GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated to bypass a required merge request approval policy on a protected branch due to improper access control during approval rule synchronization.

EPSS

Процентиль: 18%
0.0026
Низкий

3.1 Low

CVSS3

Дефекты

CWE-706

Связанные уязвимости

CVSS3: 3.1
nvd
18 дней назад

GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated to bypass a required merge request approval policy on a protected branch due to improper access control during approval rule synchronization.

EPSS

Процентиль: 18%
0.0026
Низкий

3.1 Low

CVSS3

Дефекты

CWE-706