Логотип exploitDog
bind:CVE-2024-8970
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-8970

Количество 5

Количество 5

ubuntu логотип

CVE-2024-8970

10 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions starting from 11.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows an attacker to trigger a pipeline as another user under certain circumstances.

CVSS3: 8.2
EPSS: Низкий
nvd логотип

CVE-2024-8970

10 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions starting from 11.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows an attacker to trigger a pipeline as another user under certain circumstances.

CVSS3: 8.2
EPSS: Низкий
debian логотип

CVE-2024-8970

10 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions startin ...

CVSS3: 8.2
EPSS: Низкий
github логотип

GHSA-fh2j-rw8g-c7f3

10 месяцев назад

An issue was discovered in GitLab CE/EE affecting all versions starting from 11.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows an attacker to trigger a pipeline as another user under certain circumstances.

CVSS3: 8.2
EPSS: Низкий
fstec логотип

BDU:2024-08160

10 месяцев назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с ошибками авторизации, позволяющая нарушителю запускать конвейеры непрерывной интеграции и непрерывной доставки (CI/CD) на произвольных ветках программы

CVSS3: 8.2
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-8970

An issue was discovered in GitLab CE/EE affecting all versions starting from 11.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows an attacker to trigger a pipeline as another user under certain circumstances.

CVSS3: 8.2
0%
Низкий
10 месяцев назад
nvd логотип
CVE-2024-8970

An issue was discovered in GitLab CE/EE affecting all versions starting from 11.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows an attacker to trigger a pipeline as another user under certain circumstances.

CVSS3: 8.2
0%
Низкий
10 месяцев назад
debian логотип
CVE-2024-8970

An issue was discovered in GitLab CE/EE affecting all versions startin ...

CVSS3: 8.2
0%
Низкий
10 месяцев назад
github логотип
GHSA-fh2j-rw8g-c7f3

An issue was discovered in GitLab CE/EE affecting all versions starting from 11.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows an attacker to trigger a pipeline as another user under certain circumstances.

CVSS3: 8.2
0%
Низкий
10 месяцев назад
fstec логотип
BDU:2024-08160

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с ошибками авторизации, позволяющая нарушителю запускать конвейеры непрерывной интеграции и непрерывной доставки (CI/CD) на произвольных ветках программы

CVSS3: 8.2
0%
Низкий
10 месяцев назад

Уязвимостей на страницу