Описание
GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated to bypass a required merge request approval policy on a protected branch due to improper access control during approval rule synchronization.
Ссылки
- Release NotesVendor Advisory
- Permissions Required
- Permissions Required
Уязвимые конфигурации
Конфигурация 1Версия от 17.4.0 (включая) до 19.3.6 (исключая)Версия от 19.4.0 (включая) до 19.4.3 (исключая)
Одно из
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:19.5.0:*:*:*:enterprise:*:*:*
EPSS
Процентиль: 18%
0.0026
Низкий
3.1 Low
CVSS3
Дефекты
CWE-706
Связанные уязвимости
CVSS3: 3.1
github
17 дней назад
GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated to bypass a required merge request approval policy on a protected branch due to improper access control during approval rule synchronization.
EPSS
Процентиль: 18%
0.0026
Низкий
3.1 Low
CVSS3
Дефекты
CWE-706