Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-2459

Опубликовано: 05 авг. 2022
Источник: nvd
CVSS3: 2.7
EPSS Низкий

Описание

An issue has been discovered in GitLab EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. It may be possible for email invited members to join a project even after the Group Owner has enabled the setting to prevent members from being added to projects in a group, if the invite was sent before the setting was enabled.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия до 15.0.5 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 15.1.0 (включая) до 15.1.4 (исключая)
cpe:2.3:a:gitlab:gitlab:15.2:*:*:*:enterprise:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия до 15.0.5 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 15.1.0 (включая) до 15.1.4 (исключая)
cpe:2.3:a:gitlab:gitlab:15.2:*:*:*:community:*:*:*

EPSS

Процентиль: 40%
0.00181
Низкий

2.7 Low

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 2.7
ubuntu
больше 3 лет назад

An issue has been discovered in GitLab EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. It may be possible for email invited members to join a project even after the Group Owner has enabled the setting to prevent members from being added to projects in a group, if the invite was sent before the setting was enabled.

CVSS3: 2.7
debian
больше 3 лет назад

An issue has been discovered in GitLab EE affecting all versions befor ...

CVSS3: 2.7
github
больше 3 лет назад

An issue has been discovered in GitLab EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. It may be possible for email invited members to join a project even after the Group Owner has enabled the setting to prevent members from being added to projects in a group, if the invite was sent before the setting was enabled.

EPSS

Процентиль: 40%
0.00181
Низкий

2.7 Low

CVSS3

Дефекты

CWE-862