Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-9773

Опубликовано: 27 мар. 2025
Источник: nvd
CVSS3: 3.7
CVSS3: 8
EPSS Низкий

Описание

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicious code to the CLI commands shown in the UI.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 14.9.0 (включая) до 17.8.6 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 17.9.0 (включая) до 17.9.3 (исключая)
cpe:2.3:a:gitlab:gitlab:17.10.0:*:*:*:enterprise:*:*:*

EPSS

Процентиль: 20%
0.00063
Низкий

3.7 Low

CVSS3

8 High

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 3.7
ubuntu
9 месяцев назад

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicious code to the CLI commands shown in the UI.

CVSS3: 3.7
debian
9 месяцев назад

An issue was discovered in GitLab EE affecting all versions starting f ...

CVSS3: 3.7
github
9 месяцев назад

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicious code to the CLI commands shown in the UI.

CVSS3: 3.7
fstec
9 месяцев назад

Уязвимость модуля Harbor Registry программной платформы на базе git для совместной работы над кодом GitLab, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 20%
0.00063
Низкий

3.7 Low

CVSS3

8 High

CVSS3

Дефекты

CWE-77