PT-2021-22775
CVE-2021-39936
·
تاريخ النشر
2021-12-13
·
تاريخ التحديث
2024-03-06
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
GitLab CE/EE versions 10.7 through 14.3.5
GitLab CE/EE versions 14.4 through 14.4.3
GitLab CE/EE versions 14.5 through 14.5.1
Description
The issue is related to improper access control in GitLab CE/EE, allowing an attacker with a deploy token to access a project's disabled wiki.
Recommendations
For versions 10.7 through 14.3.5, update to version 14.3.6 or later.
For versions 14.4 through 14.4.3, update to version 14.4.4 or later.
For versions 14.5 through 14.5.1, update to version 14.5.2 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾