Описание
An issue has been discovered in GitLab affecting all versions starting with 7.1. A member of a private group was able to validate the use of a specific name for private project.
Ссылки
- Vendor Advisory
- ExploitThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
- Vendor Advisory
- ExploitThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 7.1.0 (включая) до 13.6.6 (исключая)Версия от 7.1.0 (включая) до 13.6.6 (исключая)Версия от 13.7.0 (включая) до 13.7.6 (исключая)Версия от 13.7.0 (включая) до 13.7.6 (исключая)Версия от 13.8.0 (включая) до 13.8.2 (исключая)Версия от 13.8.0 (включая) до 13.8.2 (исключая)
Одно из
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
EPSS
Процентиль: 51%
0.00279
Низкий
3.5 Low
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-209
Связанные уязвимости
CVSS3: 3.5
ubuntu
почти 5 лет назад
An issue has been discovered in GitLab affecting all versions starting with 7.1. A member of a private group was able to validate the use of a specific name for private project.
CVSS3: 3.5
debian
почти 5 лет назад
An issue has been discovered in GitLab affecting all versions starting ...
CVSS3: 3.5
github
больше 3 лет назад
An issue has been discovered in GitLab affecting all versions starting with 7.1. A member of a private group was able to validate the use of a specific name for private project.
EPSS
Процентиль: 51%
0.00279
Низкий
3.5 Low
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-209