Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-9773

Опубликовано: 27 мар. 2025
Источник: nvd
CVSS3: 3.7
CVSS3: 8
EPSS Низкий

Описание

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicious code to the CLI commands shown in the UI.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 14.9.0 (включая) до 17.8.6 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 17.9.0 (включая) до 17.9.3 (исключая)
cpe:2.3:a:gitlab:gitlab:17.10.0:*:*:*:enterprise:*:*:*

EPSS

Процентиль: 23%
0.00076
Низкий

3.7 Low

CVSS3

8 High

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 3.7
ubuntu
10 месяцев назад

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicious code to the CLI commands shown in the UI.

CVSS3: 3.7
debian
10 месяцев назад

An issue was discovered in GitLab EE affecting all versions starting f ...

CVSS3: 3.7
github
10 месяцев назад

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicious code to the CLI commands shown in the UI.

CVSS3: 3.7
fstec
11 месяцев назад

Уязвимость модуля Harbor Registry программной платформы на базе git для совместной работы над кодом GitLab, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 23%
0.00076
Низкий

3.7 Low

CVSS3

8 High

CVSS3

Дефекты

CWE-77