Описание
An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. It may be possible for malicious group or project maintainers to change their corresponding group or project visibility by crafting a malicious POST request.
Ссылки
- Vendor Advisory
- Broken LinkVendor Advisory
- Permissions RequiredThird Party Advisory
- Vendor Advisory
- Broken LinkVendor Advisory
- Permissions RequiredThird Party Advisory
Уязвимые конфигурации
Одно из
Одно из
EPSS
4.9 Medium
CVSS3
2.7 Low
CVSS3
Дефекты
Связанные уязвимости
An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. It may be possible for malicious group or project maintainers to change their corresponding group or project visibility by crafting a malicious POST request.
An issue has been discovered in GitLab CE/EE affecting all versions be ...
An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. It may be possible for malicious group or project maintainers to change their corresponding group or project visibility by crafting a malicious POST request.
EPSS
4.9 Medium
CVSS3
2.7 Low
CVSS3