Описание
An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demoted project members to access details on authored merge requests
Ссылки
- Vendor Advisory
- Vendor Advisory
- Issue TrackingThird Party Advisory
- Vendor Advisory
- Vendor Advisory
- Issue TrackingThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 3.0.1 (включая) до 13.6.7 (исключая)Версия от 3.0.1 (включая) до 13.6.7 (исключая)Версия от 13.7.0 (включая) до 13.7.7 (исключая)Версия от 13.7.0 (включая) до 13.7.7 (исключая)Версия от 13.8.0 (включая) до 13.8.4 (исключая)Версия от 13.8.0 (включая) до 13.8.4 (исключая)
Одно из
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
EPSS
Процентиль: 29%
0.001
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-863
Связанные уязвимости
CVSS3: 4.3
ubuntu
около 4 лет назад
An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demoted project members to access details on authored merge requests
CVSS3: 4.3
debian
около 4 лет назад
An issue has been discovered in GitLab affecting all versions starting ...
CVSS3: 4.3
github
около 3 лет назад
An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demoted project members to access details on authored merge requests
EPSS
Процентиль: 29%
0.001
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-863