Логотип exploitDog
bind:CVE-2024-11669
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-11669

Количество 5

Количество 5

ubuntu логотип

CVE-2024-11669

7 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions from 16.9.8 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Certain API endpoints could potentially allow unauthorized access to sensitive data due to overly broad application of token scopes.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2024-11669

7 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions from 16.9.8 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Certain API endpoints could potentially allow unauthorized access to sensitive data due to overly broad application of token scopes.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2024-11669

7 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions from 16 ...

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-v84c-53c6-xmmp

7 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions from 16.9.8 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Certain API endpoints could potentially allow unauthorized access to sensitive data due to overly broad application of token scopes.

CVSS3: 6.5
EPSS: Низкий
fstec логотип

BDU:2024-10983

7 месяцев назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с недостатками процедуры авторизации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-11669

An issue was discovered in GitLab CE/EE affecting all versions from 16.9.8 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Certain API endpoints could potentially allow unauthorized access to sensitive data due to overly broad application of token scopes.

CVSS3: 6.5
0%
Низкий
7 месяцев назад
nvd логотип
CVE-2024-11669

An issue was discovered in GitLab CE/EE affecting all versions from 16.9.8 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Certain API endpoints could potentially allow unauthorized access to sensitive data due to overly broad application of token scopes.

CVSS3: 6.5
0%
Низкий
7 месяцев назад
debian логотип
CVE-2024-11669

An issue was discovered in GitLab CE/EE affecting all versions from 16 ...

CVSS3: 6.5
0%
Низкий
7 месяцев назад
github логотип
GHSA-v84c-53c6-xmmp

An issue was discovered in GitLab CE/EE affecting all versions from 16.9.8 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Certain API endpoints could potentially allow unauthorized access to sensitive data due to overly broad application of token scopes.

CVSS3: 6.5
0%
Низкий
7 месяцев назад
fstec логотип
BDU:2024-10983

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с недостатками процедуры авторизации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 6.5
0%
Низкий
7 месяцев назад

Уязвимостей на страницу