Описание
An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Developer user with admin_compliance_framework custom role may have been able to modify the URL for a group namespace.
Ссылки
- Broken Link
- Permissions Required
- Broken Link
- Permissions Required
Уязвимые конфигурации
Одно из
EPSS
4.9 Medium
CVSS3
2.7 Low
CVSS3
Дефекты
Связанные уязвимости
An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Developer user with `admin_compliance_framework` custom role may have been able to modify the URL for a group namespace.
An issue was discovered in GitLab CE/EE affecting all versions startin ...
An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Developer user with `admin_compliance_framework` custom role may have been able to modify the URL for a group namespace.
Уязвимость функции admin_compliance_framework компонента Group Namespace URL Handler программной платформы на базе git для совместной работы над кодом GitLab, позволяющая нарушителю изменить URL-адрес группы
EPSS
4.9 Medium
CVSS3
2.7 Low
CVSS3