Lucene search

K
freebsdFreeBSDD8972BCD-1B64-11EE-9CD6-001B217B3468
HistoryJul 05, 2023 - 12:00 a.m.

Gitlab -- Vulnerabilities

2023-07-0500:00:00
vuxml.freebsd.org
4
gitlab
public groups
naming
vulnerability
unix

8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

27.6%

Gitlab reports:

A user can change the name and path of some public GitLab groups

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchgitlab-ce= 16.1.0UNKNOWN
FreeBSDanynoarchgitlab-ce< 16.1.2UNKNOWN

8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

27.6%

Related for D8972BCD-1B64-11EE-9CD6-001B217B3468