Описание
Improper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4, and 12.6 to 14.7.1 allows project non-members to retrieve the service desk email address
| Релиз | Статус | Примечание |
|---|---|---|
| esm-apps-legacy/xenial | ignored | not maintainable |
| esm-apps/xenial | ignored | end of ESM support, was ignored [not maintainable] |
| trusty | ignored | end of standard support |
| upstream | needs-triage | |
| xenial | ignored | end of standard support |
Показывать по
10
3.5 Low
CVSS2
4.3 Medium
CVSS3
Связанные уязвимости
CVSS3: 4.3
nvd
больше 4 лет назад
Improper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4, and 12.6 to 14.7.1 allows project non-members to retrieve the service desk email address
CVSS3: 4.3
debian
больше 4 лет назад
Improper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 ...
CVSS3: 4.3
github
больше 4 лет назад
Improper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4, and 12.6 to 14.7.1 allows project non-members to retrieve the service desk email address
3.5 Low
CVSS2
4.3 Medium
CVSS3