Описание
An issue was discovered in GitLab CE and EE 8.15 through 12.9.2. Members of a group could still have access after the group is deleted.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 8.15.0 (включая) до 12.7.9 (исключая)Версия от 8.15.0 (включая) до 12.7.9 (исключая)Версия от 12.8.0 (включая) до 12.8.9 (исключая)Версия от 12.8.0 (включая) до 12.8.9 (исключая)Версия от 12.9.0 (включая) до 12.9.3 (исключая)Версия от 12.9.0 (включая) до 12.9.3 (исключая)
Одно из
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
EPSS
Процентиль: 21%
0.00067
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-306
Связанные уязвимости
CVSS3: 6.5
ubuntu
около 5 лет назад
An issue was discovered in GitLab CE and EE 8.15 through 12.9.2. Members of a group could still have access after the group is deleted.
CVSS3: 6.5
debian
около 5 лет назад
An issue was discovered in GitLab CE and EE 8.15 through 12.9.2. Membe ...
github
около 3 лет назад
An issue was discovered in GitLab CE and EE 8.15 through 12.9.2. Members of a group could still have access after the group is deleted.
EPSS
Процентиль: 21%
0.00067
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-306