CVE-2022-3293

Опубликовано: 17 окт. 2022

Источник: nvd

CVSS3: 3.5

CVSS3: 4.3

EPSS Низкий

Описание

Email addresses were leaked in WebHook logs in GitLab EE affecting all versions from 9.3 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1

Ссылки

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3293.json
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/369008
Broken Link
Vendor Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3293.json
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/369008
Broken Link
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/369008
Broken Link
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Версия от 9.3 (включая) до 15.2.5 (исключая)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Версия от 15.3 (включая) до 15.3.4 (исключая)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Версия от 15.4 (включая) до 15.4.1 (исключая)

EPSS

Процентиль: 28%

0.00099

Низкий

3.5 Low

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-532

Связанные уязвимости

CVE-2022-3293

CVSS3: 3.5

ubuntu

больше 2 лет назад

Email addresses were leaked in WebHook logs in GitLab EE affecting all versions from 9.3 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1

CVE-2022-3293

CVSS3: 3.5

debian

больше 2 лет назад

Email addresses were leaked in WebHook logs in GitLab EE affecting all ...

GHSA-v92j-h587-3vv3

CVSS3: 4.3

github

больше 2 лет назад

Email addresses were leaked in WebHook logs in GitLab EE affecting all versions from 9.3 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1

EPSS

Процентиль: 28%

0.00099

Низкий

3.5 Low

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-532