Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-3706
HistoryNov 10, 2022 - 12:15 a.m.

Authorization

2022-11-1000:15:00
PRIOn knowledge base
www.prio-n.com
6
gitlab ce/ee
improper authorization
unauthorized user
retried jobs
upstream pipeline

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.0%

Improper authorization in GitLab CE/EE affecting all versions from 7.14 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a user retrying a job in a downstream pipeline to take ownership of the retried jobs in the upstream pipeline even if the user doesn’t have access to that project.

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.0%