Описание
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to escalate privileges due to improper sanitization of HTML content rendered in a CI job modal.
Ссылки
- Release NotesVendor Advisory
- Broken Link
- Permissions Required
Уязвимые конфигурации
Конфигурация 1Версия от 19.2.0 (включая) до 19.2.2 (исключая)Версия от 19.2.0 (включая) до 19.2.2 (исключая)
Одно из
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
EPSS
Процентиль: 29%
0.00357
Низкий
7.7 High
CVSS3
9 Critical
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 7.7
github
около 1 месяца назад
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to escalate privileges due to improper sanitization of HTML content rendered in a CI job modal.
EPSS
Процентиль: 29%
0.00357
Низкий
7.7 High
CVSS3
9 Critical
CVSS3
Дефекты
CWE-79