Описание
Under specialized conditions, GitLab may allow a user with an impersonation token to perform Git actions even if impersonation is disabled. This vulnerability is present in GitLab CE/EE versions before 13.12.9, 14.0.7, 14.1.2
Ссылки
- Vendor Advisory
- Broken Link
- Vendor Advisory
- Broken Link
Уязвимые конфигурации
Одно из
EPSS
6.6 Medium
CVSS3
4.9 Medium
CVSS3
4 Medium
CVSS2
Дефекты
Связанные уязвимости
Under specialized conditions, GitLab may allow a user with an impersonation token to perform Git actions even if impersonation is disabled. This vulnerability is present in GitLab CE/EE versions before 13.12.9, 14.0.7, 14.1.2
Under specialized conditions, GitLab may allow a user with an imperson ...
Under specialized conditions, GitLab may allow a user with an impersonation token to perform Git actions even if impersonation is disabled. This vulnerability is present in GitLab CE/EE versions before 13.12.9, 14.0.7, 14.1.2
Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с некорректным управлением сеансом, позволяющая нарушителю оказать воздействие на целостность данных
EPSS
6.6 Medium
CVSS3
4.9 Medium
CVSS3
4 Medium
CVSS2