CVE-2022-2826

Опубликовано: 28 окт. 2022

Источник: nvd

CVSS3: 2.7

CVSS3: 9.8

EPSS Низкий

Описание

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions starting from 13.0 before 13.0.1. TODO

Ссылки

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2826.json
Third Party Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/370790
Broken Link
Third Party Advisory
https://hackerone.com/reports/1646633
Permissions Required
Third Party Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2826.json
Third Party Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/370790
Broken Link
Third Party Advisory
https://hackerone.com/reports/1646633
Permissions Required
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Версия от 10.0.0 (включая) до 12.9.8 (исключая)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Версия от 12.10.0 (включая) до 12.10.7 (исключая)

cpe:2.3:a:gitlab:gitlab:13.0.0:*:*:*:enterprise:*:*:*

EPSS

Процентиль: 19%

0.0006

Низкий

2.7 Low

CVSS3

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-79

Связанные уязвимости

CVE-2022-2826

CVSS3: 2.7

ubuntu

больше 2 лет назад

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions starting from 13.0 before 13.0.1. TODO

CVE-2022-2826

CVSS3: 2.7

debian

больше 2 лет назад

An issue has been discovered in GitLab affecting all versions starting ...

GHSA-rwch-32vf-3m2v

CVSS3: 9.8

github

больше 2 лет назад

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions starting from 13.0 before 13.0.1. TODO

EPSS

Процентиль: 19%

0.0006

Низкий

2.7 Low

CVSS3

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-79