Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-1936

Опубликовано: 11 июл. 2023
Источник: nvd
CVSS3: 3.5
CVSS3: 4.3
EPSS Низкий

Описание

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows an attacker to leak the email address of a user who created a service desk issue.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 13.7 (включая) до 15.11.10 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 13.7 (включая) до 15.11.10 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 16.0.0 (включая) до 16.0.6 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 16.0.0 (включая) до 16.0.6 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 16.1 (включая) до 16.1.1 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 16.1 (включая) до 16.1.1 (исключая)

EPSS

Процентиль: 56%
0.00339
Низкий

3.5 Low

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-359
NVD-CWE-Other

Связанные уязвимости

CVSS3: 3.5
ubuntu
почти 2 года назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows an attacker to leak the email address of a user who created a service desk issue.

CVSS3: 3.5
debian
почти 2 года назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

CVSS3: 3.5
github
почти 2 года назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows an attacker to leak the email address of a user who created a service desk issue.

EPSS

Процентиль: 56%
0.00339
Низкий

3.5 Low

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-359
NVD-CWE-Other