Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xxx4-cx36-38r5

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Lack of email address ownership verification in the CODEOWNERS feature in all versions of GitLab EE since version 11.3 allows an attacker to bypass CODEOWNERS Merge Request approval requirement under rare circumstances

Lack of email address ownership verification in the CODEOWNERS feature in all versions of GitLab EE since version 11.3 allows an attacker to bypass CODEOWNERS Merge Request approval requirement under rare circumstances

EPSS

Процентиль: 10%
0.00037
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-347

Связанные уязвимости

CVSS3: 5.3
nvd
больше 3 лет назад

Lack of email address ownership verification in the CODEOWNERS feature in all versions of GitLab EE starting from 11.3 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows an attacker to bypass CODEOWNERS Merge Request approval requirement under rare circumstances

CVSS3: 5.3
debian
больше 3 лет назад

Lack of email address ownership verification in the CODEOWNERS feature ...

EPSS

Процентиль: 10%
0.00037
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-347