Описание
GitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of restricted pipelines via the merge request endpoint.
Ссылки
- Vendor Advisory
- Permissions Required
- Vendor Advisory
- Permissions Required
Уязвимые конфигурации
Конфигурация 1Версия до 11.8 (включая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
EPSS
Процентиль: 56%
0.00339
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-200
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 4.3
ubuntu
больше 5 лет назад
GitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of restricted pipelines via the merge request endpoint.
CVSS3: 4.3
debian
больше 5 лет назад
GitLab 11.8 and later contains a security vulnerability that allows a ...
CVSS3: 4.3
github
около 3 лет назад
GitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of restricted pipelines via the merge request endpoint.
EPSS
Процентиль: 56%
0.00339
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-200
NVD-CWE-noinfo