Количество 5
Количество 5

CVE-2023-5117
An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on confidential issues and epics of public projects could be accessed without authentication via a direct link to the uploaded file URL.

CVE-2023-5117
An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on confidential issues and epics of public projects could be accessed without authentication via a direct link to the uploaded file URL.
CVE-2023-5117
An issue was discovered in GitLab CE/EE affecting all versions before ...
GHSA-pwvw-rggj-f74r
An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on confidential issues and epics of public projects could be accessed without authentication via a direct link to the uploaded file URL.

BDU:2025-00032
Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с недостаточной защитой служебных данных, позволяющая нарушителю обойти ограничения безопасности и получить несанкционированный доступ к защищаемой информации
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
![]() | CVE-2023-5117 An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on confidential issues and epics of public projects could be accessed without authentication via a direct link to the uploaded file URL. | CVSS3: 3.7 | 0% Низкий | 6 месяцев назад |
![]() | CVE-2023-5117 An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on confidential issues and epics of public projects could be accessed without authentication via a direct link to the uploaded file URL. | CVSS3: 3.7 | 0% Низкий | 6 месяцев назад |
CVE-2023-5117 An issue was discovered in GitLab CE/EE affecting all versions before ... | CVSS3: 3.7 | 0% Низкий | 6 месяцев назад | |
GHSA-pwvw-rggj-f74r An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on confidential issues and epics of public projects could be accessed without authentication via a direct link to the uploaded file URL. | CVSS3: 3.7 | 0% Низкий | 6 месяцев назад | |
![]() | BDU:2025-00032 Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с недостаточной защитой служебных данных, позволяющая нарушителю обойти ограничения безопасности и получить несанкционированный доступ к защищаемой информации | CVSS3: 3.7 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу