Описание
Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git repository that is in the process of being migrated until the full set of migration steps has been completed. This can allow valid users to obtain unintended access.
Ссылки
- Mailing ListPatchThird Party Advisory
- PatchThird Party Advisory
- Mailing ListPatchThird Party Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
EPSS
8.1 High
CVSS3
5.5 Medium
CVSS2
Дефекты
Связанные уязвимости
Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git repository that is in the process of being migrated until the full set of migration steps has been completed. This can allow valid users to obtain unintended access.
Gitolite before 3.6.9 does not (in certain configurations involving @a ...
Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git repository that is in the process of being migrated until the full set of migration steps has been completed. This can allow valid users to obtain unintended access.
EPSS
8.1 High
CVSS3
5.5 Medium
CVSS2