Описание
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions.
Ссылки
- Release NotesVendor Advisory
- Broken Link
- Permissions Required
Уязвимые конфигурации
Одно из
EPSS
2.2 Low
CVSS3
4.4 Medium
CVSS3
Дефекты
Связанные уязвимости
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions.
GitLab has remediated an issue in GitLab CE/EE affecting all versions ...
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions.
Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с некорректным кодированием или экранированием выходных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
EPSS
2.2 Low
CVSS3
4.4 Medium
CVSS3