Описание
A privilege escalation issue has been discovered in GitLab EE affecting all versions from 16.6 prior to 18.2.7, 18.3 prior to 18.3.3, and 18.4 prior to 18.4.1 that could have allowed a developer with specific group management permissions to escalate their privileges and obtain unauthorized access to additional system capabilities.
Ссылки
- Broken Link
- Permissions Required
Уязвимые конфигурации
Одно из
EPSS
6.5 Medium
CVSS3
8.8 High
CVSS3
Дефекты
Связанные уязвимости
A privilege escalation issue has been discovered in GitLab EE affectin ...
A privilege escalation issue has been discovered in GitLab EE affecting all versions from 16.6 prior to 18.2.7, 18.3 prior to 18.3.3, and 18.4 prior to 18.4.1 that could have allowed a developer with specific group management permissions to escalate their privileges and obtain unauthorized access to additional system capabilities.
Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с небезопасным управлением привилегиями, позволяющая нарушителю повысить свои привилегии
EPSS
6.5 Medium
CVSS3
8.8 High
CVSS3