Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-3413

Опубликовано: 29 сент. 2023
Источник: nvd
CVSS3: 6.5
CVSS3: 7.5
EPSS Низкий

Описание

An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible to read the source code of a project through a fork created before changing visibility to only project members.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 16.2 (включая) до 16.2.8 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 16.2 (включая) до 16.2.8 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 16.3.0 (включая) до 16.3.5 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 16.3.0 (включая) до 16.3.5 (исключая)
cpe:2.3:a:gitlab:gitlab:16.4.0:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:16.4.0:*:*:*:enterprise:*:*:*

EPSS

Процентиль: 44%
0.00216
Низкий

6.5 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-201
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 1 года назад

An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible to read the source code of a project through a fork created before changing visibility to only project members.

CVSS3: 6.5
debian
больше 1 года назад

An issue has been discovered in GitLab affecting all versions starting ...

CVSS3: 6.5
github
больше 1 года назад

An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible to read the source code of a project through a fork created before changing visibility to only project members.

EPSS

Процентиль: 44%
0.00216
Низкий

6.5 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-201
NVD-CWE-noinfo