Логотип exploitDog
bind:CVE-2024-8641
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-8641

Количество 5

Количество 5

ubuntu логотип

CVE-2024-8641

9 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2. It may have been possible for an attacker with a victim's CI_JOB_TOKEN to obtain a GitLab session token belonging to the victim.

CVSS3: 6.7
EPSS: Низкий
nvd логотип

CVE-2024-8641

9 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2. It may have been possible for an attacker with a victim's CI_JOB_TOKEN to obtain a GitLab session token belonging to the victim.

CVSS3: 6.7
EPSS: Низкий
debian логотип

CVE-2024-8641

9 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

CVSS3: 6.7
EPSS: Низкий
github логотип

GHSA-x654-52cq-hxj3

9 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2. It may have been possible for an attacker with a victim's CI_JOB_TOKEN to obtain a GitLab session token belonging to the victim.

CVSS3: 6.7
EPSS: Низкий
fstec логотип

BDU:2024-09379

10 месяцев назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с ошибками переключения контекста привилегий, позволяющая нарушителю повысить свои привилегии и получить несанкционированный доступ к защищаемой информации

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-8641

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2. It may have been possible for an attacker with a victim's CI_JOB_TOKEN to obtain a GitLab session token belonging to the victim.

CVSS3: 6.7
0%
Низкий
9 месяцев назад
nvd логотип
CVE-2024-8641

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2. It may have been possible for an attacker with a victim's CI_JOB_TOKEN to obtain a GitLab session token belonging to the victim.

CVSS3: 6.7
0%
Низкий
9 месяцев назад
debian логотип
CVE-2024-8641

An issue has been discovered in GitLab CE/EE affecting all versions st ...

CVSS3: 6.7
0%
Низкий
9 месяцев назад
github логотип
GHSA-x654-52cq-hxj3

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2. It may have been possible for an attacker with a victim's CI_JOB_TOKEN to obtain a GitLab session token belonging to the victim.

CVSS3: 6.7
0%
Низкий
9 месяцев назад
fstec логотип
BDU:2024-09379

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с ошибками переключения контекста привилегий, позволяющая нарушителю повысить свои привилегии и получить несанкционированный доступ к защищаемой информации

CVSS3: 8.8
0%
Низкий
10 месяцев назад

Уязвимостей на страницу